Skip to content

Commit 723695b

Browse files
authored
Adding information about port 7688 (#917) (#920)
Cherry-picked from #917
1 parent be0a9b1 commit 723695b

File tree

1 file changed

+6
-2
lines changed

1 file changed

+6
-2
lines changed

modules/ROOT/pages/security/ssl-framework.adoc

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ The SSL framework provides support for securing the following Neo4j communicatio
77

88
* `bolt` (port - `7687`)
99
* `https` (port - `7473`)
10-
* `cluster` (ports - `5000`, `6000`, and `7000`)
10+
* `cluster` (ports - `5000`, `6000`, `7000`, and `7688`)
1111
* `backups` (port - `6362`)
1212
1313
This page describes how to set up SSL within your environment, how to view, validate, and test the certificates.
@@ -272,6 +272,9 @@ Each policy needs to be explicitly enabled by setting:
272272

273273
Bolt protocol is based on the link:https://neo4j.com/docs/bolt/current/packstream/[PackStream serialization] and supports the Cypher type system, protocol versioning, authentication, and TLS via certificates.
274274
For Neo4j clusters, Bolt provides smart client routing with load balancing and failover.
275+
When server side routing is enabled, an additional Bolt port is open on `7688`.
276+
It can be used only within the cluster and with all the same settings as the external Bolt port.
277+
275278
Bolt connector is used by Cypher Shell, Neo4j Browser, and by the officially supported language drivers.
276279
Bolt connector is enabled by default but its encryption is disabled.
277280
To enable the encryption over Bolt, create the folder structure and place the key file and the certificates under those.
@@ -649,11 +652,12 @@ openssl s_client -connect my_domain.com:7473
649652
=== Configure SSL for intra-cluster communications
650653

651654
Intra-cluster encryption is the security solution for the cluster communication.
652-
The Neo4j cluster communicates on 3 ports:
655+
The Neo4j cluster communicates on 4 ports:
653656

654657
* 5000 - Discovery management
655658
* 6000 - Transactions
656659
* 7000 - Raft communications
660+
* 7688 - Server side routing
657661

658662
To set up intra-cluster encryption, on each server create the folder structure and place the key file and the certificates under those.
659663
Then, you need to configure the SSL cluster policies in the _neo4j.conf_ file and test that the intra-cluster communication is encrypted.

0 commit comments

Comments
 (0)