Internet-Security raven logo internet-security.com

TCP 2377

ProtocolTCP
Port2377
LabelsDocker Swarm cluster management communications

Synopsis

  • Docker Swarm (SwarmKit): TCP 2377 is the cluster management port used by Docker Swarm manager nodes; workers and other managers connect to this port to join and manage the swarm.
  • Real-world examples: Docker Engine running in Swarm mode on production hosts, and Docker Enterprise/Universal Control Plane (now Mirantis Kubernetes Engine) when using its Swarm component, rely on TCP 2377 for control-plane traffic.
  • Security note: Attackers sometimes scan for 2377 to identify Swarm managers, but most real-world compromises target the Docker Engine API on 2375/2376; 2377 is typically protected by mutual TLS in default Swarm configurations.

Observed activity

Last 30 days Detailed chart

More information