TCP 2380
Synopsis
- TCP port 2380 is the default peer (intra-cluster) port for etcd, the distributed key-value store.
- It carries Raft replication traffic between etcd nodes in real deployments such as Kubernetes control planes set up with kubeadm, Rancher RKE/RKE2, K3s, and Red Hat OpenShift.
- CoreOS/Container Linux etcd clusters and vendor distributions like VMware Tanzu also use 2380 for etcd peer URLs.
- Managed services (e.g., EKS/AKS/GKE) use etcd internally and keep 2380 restricted within their control-plane networks.
- Security note: internet-exposed etcd (ports 2379/2380) has been targeted by scanning and abuse; without TLS/auth, attackers have obtained data or disrupted clusters.
Observed activity
Last 30 days
Detailed chart