HTTPfy

Port 2380 (etcd peer)

Replication traffic between etcd cluster members.

Registered (user) port, 1024-49151 TCP Containers and Kubernetes Do not expose to the internet

What port 2380 is used for

Replication traffic between etcd cluster members.

Security: should port 2380 be open?

Do not expose to the internet. Only etcd members should reach it; use peer TLS.

IANA assignment

Service nameProtoDescriptionAssigneeReference
etcd-server TCP etcd server to server communication CoreOS -

Registry dates for this port: registered 2014-07-09.

Check what is listening on port 2380

Linux: is anything listening on TCP 2380?
sudo ss -tlnp 'sport = :2380'
Linux / macOS: which process owns the port
sudo lsof -nP -i :2380
Older Linux / BSD (net-tools)
sudo netstat -tlnp | grep ':2380 '
Windows (Command Prompt)
netstat -ano | findstr :2380
Windows (PowerShell)
Get-NetTCPConnection -LocalPort 2380 -State Listen | Select LocalAddress,OwningProcess

Test it from outside

From another machine
nc -vz -w 5 HOST 2380
From Windows
Test-NetConnection HOST -Port 2380

Block port 2380 in the firewall

ufw
sudo ufw deny 2380/tcp
iptables
sudo iptables -A INPUT -p tcp --dport 2380 -j DROP
nftables
sudo nft add rule inet filter input tcp dport 2380 drop
Windows Firewall
New-NetFirewallRule -DisplayName 'Block TCP 2380' -Direction Inbound -Protocol TCP -LocalPort 2380 -Action Block

Related ports

2379etcd client6443Kubernetes API server2378dali2381compaq-https2382ms-olap3

All port numbers · Open port checker
Assignment data: IANA port number registry (public domain), retrieved 2026-11-10.