Ports

An overview of the Neo4j-specific ports. Note that these ports are in addition to those necessary for ordinary network operation.

Specific recommendations on port openings cannot be made, as the firewall configuration must be performed taking your particular conditions into consideration.

When exposing network services, make sure they are always protected.

The listen address configuration settings will set the network interface and port to listen on. For example the IP-address 127.0.0.1 and port 7687 can be set with the value 127.0.0.1:7687. The table below shows an overview of available Neo4j-specific ports and related configuration settings.

Table 1. Listen address configuration settings overview
Name	Default port	Related configuration setting
Backup	`6362`	`dbms.backup.listen_address`
HTTP	`7474`	`dbms.connector.http.listen_address`
HTTPS	`7473`	`dbms.connector.https.listen_address`
Bolt	`7687`	`dbms.connector.bolt.listen_address`
Causal Cluster discovery management	`5000`	`causal_clustering.discovery_listen_address`
Causal Cluster transaction	`6000`	`causal_clustering.transaction_listen_address`
Causal Cluster RAFT	`7000`	`causal_clustering.raft_listen_address`
Causal Cluster routing connector	`7688`	`dbms.routing.listen_address`
Graphite monitoring	`2003`	`metrics.graphite.server`
Prometheus monitoring	`2004`	`metrics.prometheus.endpoint`
JMX monitoring	`3637`	`dbms.jvm.additional=-Dcom.sun.management.jmxremote.port`
Remote debugging	`5005`	`dbms.jvm.additional=-agentlib:jdwp=transport=dt_socket,server=y,suspend=n,address=*:5005`

The configuration setting dbms.default_listen_address configures the default network interface to listen for incoming connections.

The advertised address configuration settings are used for routing purposes. An advertised address is composed by a hostname/IP-address and port. For example the IP-address 127.0.0.1 and port 7687 can be set with the value 127.0.0.1:7687. If a host name resolution service has been configured, the advertised address can use a hostname, for example example.com:7687. The table below shows an overview of available Neo4j-specific ports and related configuration settings.

Table 2. Advertised address configuration settings overview
Name	Default port	Related configuration setting
HTTP	`7474`	`dbms.connector.http.advertised_address`
HTTPS	`7473`	`dbms.connector.https.advertised_address`
Bolt	`7687`	`dbms.connector.bolt.advertised_address`
Causal Cluster discovery management	`5000`	`causal_clustering.discovery_advertised_address`
Causal Cluster transaction	`6000`	`causal_clustering.transaction_advertised_address`
Causal Cluster RAFT	`7000`	`causal_clustering.raft_advertised_address`
Causal Cluster routing connector	`7688`	`dbms.routing.advertised_address`

The configuration setting dbms.default_advertised_address configures the default hostname/IP-address for advertised address.

Backup

Default port: 6362

Table 3. Backup
Related configuration setting	Default value	Description
`dbms.backup.listen_address`	`127.0.0.1:6362`	Network interface and port for the backup server to listen on.
`dbms.backup.enabled`	`true`	Enable support for running online backups.

In production environments, external access to the backup port should be blocked by a firewall.

For more information, see Server configuration.

HTTP

Default port: 7474

Table 4. HTTP connector
Related configuration setting	Default value	Description
`dbms.connector.http.listen_address`	`:7474`	Network interface and port for the HTTP connector to listen on.
`dbms.connector.http.advertised_address`	`:7474`	Advertised hostname/IP-address and port for the HTTP connector.
`dbms.connector.http.enabled`	`true`	Enable the HTTP connector.

The HTTP connector is enabled by default.
The network communication is unencrypted.
Used by Neo4j Browser and the HTTP API.

For more information, see Configure connectors.

HTTPS

Default port: 7473

Table 5. HTTPS connector
Related configuration setting	Default value	Description
`dbms.connector.https.listen_address`	`:7473`	Network interface and port for the HTTPS connector to listen on.
`dbms.connector.https.advertised_address`	`:7473`	Advertised hostname/IP-address and port for the HTTPS connector.
`dbms.connector.https.enabled`	`false`	Enable the HTTPS connector.

The network communication is encrypted.
Used by Neo4j Browser and the HTTP API.

For more information, see Configure connectors.

Bolt

Default port: 7687

Table 6. Bolt connector
Related configuration setting	Default value	Description
`dbms.connector.bolt.listen_address`	`:7687`	Network interface and port for the Bolt connector to listen on.
`dbms.connector.bolt.advertised_address`	`:7687`	Advertised hostname/IP-address and port for the Bolt connector.
`dbms.connector.bolt.enabled`	`true`	Enable the Bolt connector.
`dbms.connector.bolt.tls_level`	`DISABLED`	Encryption level for the Bolt connector.

By default, the Bolt connector is enabled, but its encryption is turned off.
Used by Cypher Shell, Neo4j Browser, and the official Neo4j drivers.

For more information, see Configure connectors.

Causal Cluster

By default, the operating mode of a Neo4j instance (dbms.mode) is set to SINGLE.

Table 7. Cluster listen address
Name	Default port	Default value	Related configuration setting
Discovery management	`5000`	`:5000`	`causal_clustering.discovery_listen_address`
Transaction	`6000`	`:6000`	`causal_clustering.transaction_listen_address`
RAFT	`7000`	`:7000`	`causal_clustering.raft_listen_address`
Routing connector	`7688`	`:7688`	`dbms.routing.listen_address`

Table 8. Cluster advertised address
Name	Default port	Default value	Related configuration setting
Discovery management	`5000`	`:5000`	`causal_clustering.discovery_advertised_address`
Transaction	`6000`	`:6000`	`causal_clustering.transaction_advertised_address`
RAFT	`7000`	`:7000`	`causal_clustering.raft_advertised_address`
Routing connector	`7688`	`:7688`	`dbms.routing.advertised_address`

The ports are likely be different in a production installation; therefore the potential opening of ports must be modified accordingly.

For more information, see:

Graphite monitoring

Default port: 2003

Table 9. Graphite
Related configuration setting	Default value	Description
`metrics.graphite.server`	`:2003`	Hostname/IP-address and port of the Graphite server.
`metrics.graphite.enabled`	`false`	Enable exporting metrics to the Graphite server.

This is an outbound connection that enables a Neo4j instance to communicate with a Graphite server.

For further information, see Graphite and the Graphite official documentation.

Prometheus monitoring

Default port: 2004

Table 10. Prometheus
Related configuration setting	Default value	Description
`metrics.prometheus.endpoint`	`localhost:2004`	Network interface and port for the Prometheus endpoint to listen on.
`metrics.prometheus.enabled`	`false`	Enable exporting metrics with the Prometheus endpoint.

For more information, see Prometheus.

JMX monitoring

Default port: 3637

Table 11. Java Management Extensions
Related configuration setting	Default value	Description
`dbms.jvm.additional=-Dcom.sun.management.jmxremote.port`	`3637`	Additional setting for exposing the Java Management Extensions (JMX).

For further information, see Java Reference → JMX metrics and the official documentation on Monitoring and Management Using JMX.

Remote debugging

Default port: 5005

Table 12. Remote debugging
Related configuration setting	Default value	Description
`dbms.jvm.additional=-agentlib:jdwp=transport=dt_socket,server=y,suspend=n,address=*:5005`	`:5005`	Additional setting for exposing remote debugging.

For more information, see the Java Reference → Setup for remote debugging.