topic Re: Securing Managed Server in Dynatrace Managed Q&A

Securing Managed Server

AntonioSousa — Tue, 11 Mar 2025 13:29:34 GMT

Following Cluster node ports I have restricted access to port 443 to devices acessing the UI, and port 8443 to the machines where OneAgent is running.

Regarding port 8019, which type of connections are being terminated there? UI? OneAgent?

Re: Securing Managed Server

Radoslaw_Szulgo — Fri, 26 May 2017 12:27:38 GMT

8019 is used by Upgrade UI.

Port has to be open during upgrade procedure. It is used in communication between cluster nodes.

Re: Securing Managed Server

AntonioSousa — Fri, 26 May 2017 13:26:46 GMT

Regarding cluster nodes, I would imagine if it's one cluster, than the port does not need to be open.

Regarding upgrade procedures, who is going to connect to that port 8019? Is it the OneAgents?

Re: Securing Managed Server

Radoslaw_Szulgo — Thu, 01 Jun 2017 12:33:09 GMT

Sorry for the delay. It has to be open even in single node cluster.

The upgrade procedure runs a separate process that communicates with the server on 8019 port. So if it is closed, then upgrader process won't be able to send commands to server (for instance `shutdown`).

In multi-node cluster, the port is also used to synchronize communication between upgrade processes on different nodes.

Is that clear now? Let me know if you have further questions. I'll try to answer quicker 😉

Re: Securing Managed Server

praveen_begur — Fri, 23 Jun 2017 08:45:13 GMT

Hi Radoslaw,

Regarding Port 8019, what is the Client for this Port? Will the Dt Agents on target hosts running business apps connect to Dt Managed Report Server on port 8019?

Re: Securing Managed Server

Radoslaw_Szulgo — Fri, 23 Jun 2017 08:55:47 GMT

Client is the upgrade process. Nothing else communicates on that port.

Re: Securing Managed Server

praveen_begur — Fri, 23 Jun 2017 08:58:13 GMT

Hi Radoslaw,

I request a more precise answer.

Will the Dt Agents on target hosts running business apps connect to Dt Managed Report Server on port 8019?

Where (in which host/server) exactly is the Upgrade Process running on?