Ports

This section lists ports relevant to a Neo4j installation.

This section provides an overview of the Neo4j-specific ports. Note that these ports are in addition to those necessary for ordinary network operation.

Specific recommendations on port openings cannot be made, as the firewall configuration must be performed taking your particular conditions into consideration.

When exposing network services, make sure they are always protected.

The listen address configuration settings will set the network interface and port to listen on. For example the IP-address 127.0.0.1 and port 7687 can be set with the value 127.0.0.1:7687. The table below shows an overview of available Neo4j-specific ports and related configuration settings.

Table 1. Listen address configuration settings overview
Name Default port Related configuration setting

Backup

6362

dbms.backup.listen_address

HTTP

7474

dbms.connector.http.listen_address

HTTPS

7473

dbms.connector.https.listen_address

Bolt

7687

dbms.connector.bolt.listen_address

Causal Cluster discovery management

5000

causal_clustering.discovery_listen_address

Causal Cluster transaction

6000

causal_clustering.transaction_listen_address

Causal Cluster RAFT

7000

causal_clustering.raft_listen_address

Causal Cluster routing connector

7688

dbms.routing.listen_address

Graphite monitoring

2003

metrics.graphite.server

Prometheus monitoring

2004

metrics.prometheus.endpoint

JMX monitoring

3637

:/reference/configuration-settings/index.adoc#config_dbms.jvm.additional

Remote debugging

5005

:/reference/configuration-settings/index.adoc#config_dbms.jvm.additional

The configuration setting dbms.default_listen_address configures the default network interface to listen for incoming connections.

The advertised address configuration settings are used for routing purposes. An advertised address is composed by a hostname/IP-address and port. For example the IP-address 127.0.0.1 and port 7687 can be set with the value 127.0.0.1:7687. If a host name resolution service has been configured, the advertised address can use a hostname, for example example.com:7687. The table below shows an overview of available Neo4j-specific ports and related configuration settings.

Table 2. Advertised address configuration settings overview
Name Default port Related configuration setting

HTTP

7474

dbms.connector.http.advertised_address

HTTPS

7473

dbms.connector.https.advertised_address

Bolt

7687

dbms.connector.bolt.advertised_address

Causal Cluster discovery management

5000

causal_clustering.discovery_advertised_address

Causal Cluster transaction

6000

causal_clustering.transaction_advertised_address

Causal Cluster RAFT

7000

causal_clustering.raft_advertised_address

Causal Cluster routing connector

7688

dbms.routing.advertised_address

The configuration setting dbms.default_advertised_address configures the default hostname/IP-address for advertised address.

1. Backup

Default port: 6362

Table 3. Backup
Related configuration setting Default value Description

dbms.backup.listen_address

127.0.0.1:6362

Network interface and port for the backup server to listen on.

dbms.backup.enabled

true

Enable support for running online backups.

In production environments, external access to the backup port should be blocked by a firewall.

For more information, see Server configuration.

2. HTTP

Default port: 7474

Table 4. HTTP connector
Related configuration setting Default value Description

dbms.connector.http.listen_address

:7474

Network interface and port for the HTTP connector to listen on.

dbms.connector.http.advertised_address

:7474

Advertised hostname/IP-address and port for the HTTP connector.

dbms.connector.http.enabled

true

Enable the HTTP connector.

  • The HTTP connector is enabled by default.

  • The network communication is unencrypted.

  • Used by Neo4j Browser and the HTTP API.

For more information, see Configure connectors.

3. HTTPS

Default port: 7473

Table 5. HTTPS connector
Related configuration setting Default value Description

dbms.connector.https.listen_address

:7473

Network interface and port for the HTTPS connector to listen on.

dbms.connector.https.advertised_address

:7473

Advertised hostname/IP-address and port for the HTTPS connector.

dbms.connector.https.enabled

false

Enable the HTTPS connector.

  • The network communication is encrypted.

  • Used by Neo4j Browser and the HTTP API.

For more information, see Configure connectors.

4. Bolt

Default port: 7687

Table 6. Bolt connector
Related configuration setting Default value Description

dbms.connector.bolt.listen_address

:7687

Network interface and port for the Bolt connector to listen on.

dbms.connector.bolt.advertised_address

:7687

Advertised hostname/IP-address and port for the Bolt connector.

dbms.connector.bolt.enabled

true

Enable the Bolt connector.

dbms.connector.bolt.tls_level

DISABLED

Encryption level for the Bolt connector.

  • By default, the Bolt connector is enabled, but its encryption is turned off.

  • Used by Cypher Shell, Neo4j Browser, and the official Neo4j drivers.

For more information, see Configure connectors.

5. Causal Cluster

By default, the operating mode of a Neo4j instance (dbms.mode) is set to SINGLE.

Table 7. Cluster listen address
Name Default port Default value Related configuration setting

Discovery management

5000

:5000

causal_clustering.discovery_listen_address

Transaction

6000

:6000

causal_clustering.transaction_listen_address

RAFT

7000

:7000

causal_clustering.raft_listen_address

Routing connector

7688

:7688

dbms.routing.listen_address

Table 8. Cluster advertised address
Name Default port Default value Related configuration setting

Discovery management

5000

:5000

causal_clustering.discovery_advertised_address

Transaction

6000

:6000

causal_clustering.transaction_advertised_address

RAFT

7000

:7000

causal_clustering.raft_advertised_address

Routing connector

7688

:7688

dbms.routing.advertised_address

The ports are likely be different in a production installation; therefore the potential opening of ports must be modified accordingly.

For more information, see:

6. Graphite monitoring

Default port: 2003

Table 9. Graphite
Related configuration setting Default value Description

metrics.graphite.server

:2003

Hostname/IP-address and port of the Graphite server.

metrics.graphite.enabled

false

Enable exporting metrics to the Graphite server.

This is an outbound connection that enables a Neo4j instance to communicate with a Graphite server.

For further information, see Graphite and the Graphite official documentation.

7. Prometheus monitoring

Default port: 2004

Table 10. Prometheus
Related configuration setting Default value Description

metrics.prometheus.endpoint

localhost:2004

Network interface and port for the Prometheus endpoint to listen on.

metrics.prometheus.enabled

false

Enable exporting metrics with the Prometheus endpoint.

For more information, see Prometheus.

8. JMX monitoring

Default port: 3637

Table 11. Java Management Extensions
Related configuration setting Default value Description

:/reference/configuration-settings/index.adoc#config_dbms.jvm.additional

3637

Additional setting for exposing the Java Management Extensions (JMX).

9. Remote debugging

Default port: 5005

Table 12. Remote debugging
Related configuration setting Default value Description

:/reference/configuration-settings/index.adoc#config_dbms.jvm.additional

:5005

Additional setting for exposing remote debugging.

For more information, see the Java Reference → Setup for remote debugging.