Internet-Security raven logo internet-security.com

UDP 2049

ProtocolUDP
Port2049
LabelsNetwork File System (NFS)

Synopsis

  • UDP port 2049 is used by the Network File System (NFS), especially NFSv2 and NFSv3.
  • Linux nfs-kernel-server/nfsd (nfs-utils) supports exporting NFSv3 over UDP 2049.
  • FreeBSD’s nfsd and Oracle Solaris NFS server provide NFSv3 over UDP on 2049.
  • Enterprise/NAS software such as NetApp ONTAP (7-Mode and clustered) and NFS-Ganesha support NFSv3 over UDP 2049.
  • Some NAS appliances (e.g., Synology DSM and QNAP QTS, when NFSv3 UDP is enabled) have supported NFS over UDP 2049.
  • Modern NFSv4 implementations (e.g., AWS EFS) use TCP, but UDP 2049 remains for legacy NFSv3 deployments.
  • Security: attackers often scan 2049 for open/misconfigured NFS shares; weak exports (e.g., world-writable or no_root_squash) are abused for data theft or code execution, and UDP transport can be abused for spoofing and has appeared in DDoS reflection vectors (less commonly than rpcbind on 111/UDP).

Observed activity

Last 30 days Detailed chart

More information