Skip to content

Commit c2f9341

Browse files
authored
Adding information about port 7688 neo4j#917 (neo4j#923)
Cherry-picked from neo4j#917
1 parent 54f7855 commit c2f9341

File tree

1 file changed

+14
-10
lines changed

1 file changed

+14
-10
lines changed

modules/ROOT/pages/security/ssl-framework.adoc

Lines changed: 14 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ The SSL framework provides support for securing the following Neo4j communicatio
77

88
* `bolt` (port - `7687`)
99
* `https` (port - `7473`)
10-
* `cluster` (ports - `5000`, `6000`, and `7000`)
10+
* `cluster` (ports - `5000`, `6000`, `7000`, and `7688`)
1111
* `backups` (port - `6362`)
1212
1313
[[ssl-providers]]
@@ -192,11 +192,14 @@ Each policy needs to be explicitly enabled by setting:
192192
[[ssl-bolt-config]]
193193
=== Configure SSL over Bolt
194194

195-
Bolt protocol is based on the link:https://neo4j.com/docs/bolt/current/packstream/[PackStream serialization] and supports the Cypher type system, protocol versioning, authentication, and TLS via certificates.
196-
For Neo4j clusters, Bolt provides smart client routing with load balancing and failover.
197-
Bolt connector is used by Cypher Shell, Neo4j Browser, and by the officially supported language drivers.
198-
Bolt connector is enabled by default but its encryption is disabled.
199-
To enable the encryption over Bolt, create the folder structure and place the key file and the certificates under those.
195+
Bolt protocol is based on the link:https://neo4j.com/docs/bolt/current/packstream/[PackStream serialization] and supports the Cypher type system, protocol versioning, authentication, and TLS via certificates.
196+
For Neo4j clusters, Bolt provides smart client routing with load balancing and failover.
197+
When server side routing is enabled, an additional Bolt port is open on `7688`.
198+
It can be used only within the cluster and with all the same settings as the external Bolt port.
199+
200+
Bolt connector is used by Cypher Shell, Neo4j Browser, and by the officially supported language drivers.
201+
Bolt connector is enabled by default but its encryption is disabled.
202+
To enable the encryption over Bolt, create the folder structure and place the key file and the certificates under those.
200203
Then, you need to configure the SSL Bolt policies in the _neo4j.conf_ file.
201204

202205
. Enable the Bolt connector to enable SSL over Bolt:
@@ -571,14 +574,15 @@ openssl s_client -connect my_domain.com:7473
571574
=== Configure SSL for intra-cluster communications
572575

573576
Intra-cluster encryption is the security solution for the cluster communication.
574-
The Neo4j cluster communicates on 3 ports:
577+
The Neo4j cluster communicates on 4 ports:
575578

576579
* 5000 - Discovery management
577580
* 6000 - Transactions
578581
* 7000 - Raft communications
579-
580-
To set up intra-cluster encryption, on each server create the folder structure and place the key file and the certificates under those.
581-
Then, you need to configure the SSL cluster policies in the _neo4j.conf_ file and test that the intra-cluster communication is encrypted.
582+
* 7688 - Server side routing
583+
584+
To set up intra-cluster encryption, on each server create the folder structure and place the key file and the certificates under those.
585+
Then, you need to configure the SSL cluster policies in the _neo4j.conf_ file and test that the intra-cluster communication is encrypted.
582586

583587
. Set up the _cluster_ folder under _certificates_.
584588
.. Create a directory _cluster_ under_<neo4j-home>/certificates_ folder:

0 commit comments

Comments
 (0)