Firewall Ports

StifleR Ports

The following (client) ports are used for the InterVLAN feature (see later). An asterisk (*) indicates a dynamic Port number. BranchCache tries to use a random port among the dynamic port range (49152-65535) as specified in RFC6335 section 6.

The table below describes the specific ports and communication flow used by the StifleR Client and BranchCache.

Distributed Cache Mode Comunications

Request Flow

1. TCP 443 HTTP(S) GET request for content

2. TCP 443 Returns content metadata + hashes

3. Checks local cache for content

4. UDP 3702 (Broadcast) WS-Discovery broadcast (MC): Searching for peers with content ID

5. UDP 3702 (Unicast) WS-Discovery response: Indicates content availability

6. TCP 1337 Requests content segments

7. TCP 1337 Sends encrypted content segments

8. Verifies received segments against hashes from server

Fallback If no clients responds with content hashes or if hash verification fails.

1. TCP 443 Requests Content from source

2. TCP 443 Sends requested Content

From	To	Source Port	Destination Port	Protocol	Component	Details
Client	Subnet	*(dynamic)	3702	UDP Multicast	BranchCache	Probe
Leader	Leaders	3704	3704	UDP Unicast	StifleR Client	Fwd Request
Leader	Subnet	3703	3702	UDP Multicast	StifleR Client	Fwd Request
Client	Leader	3703	*	UDP Unicast	BranchCache	Probe Match
Leader	Leader	3705	3705	UDP Unicast	StifleR	Fwd Probe Match
Leader	Client	3703	3702	UDP Unicast	StifleR	Fwd Probe Match
Client	Leader	*	81 (configurable)	HTTP (TCP/IP)	BranchCache	Req Data
Leader	Client	*	80 (BranchCache)	HTTP (TCP/IP)	StifleR	Req Data

Server – Client Communication:

• Source – dynamic

• Destination – Port 1414 TCP/IP & Port 1414 UDP for Web Sockets

Web Server - Dashboards:

• Source - dynamic

• Port 9000 is used by server to host the dashboard/data API. Dashboard uses it to connect to the REST API to get data

• Port 80 / 443 - dashboards

Beacon Server Port:

• For clients to send iperf packets to Server iPerf packets - Server TCP/UDP 5201

  FastPing packets - Server TCP 5200

Stifler Client Local Firewall Port openings required - Incoming

Name	Executable	Local Address	Remote Address	Local Port	Remote Port	Protocol	Customizable
2Pint Software StifleR - Blue Leader Data From Remote Peer - In	TwoPint.PeerDist.BlueGreenLeader.exe	Any	Any	1337	Any	TCP	Yes
2Pint Software StifleR - Green Leader Peer Data - In	TwoPint.PeerDist.BlueGreenLeader.exe	Any	Any	1337, 1339	Any	TCP	Yes
2Pint Software StifleR - Blue Leader Peer Data - In	TwoPint.PeerDist.BlueGreenLeader.exe	Any	Local Subnet	1338	Any	TCP	Yes
2Pint Software StifleR - Peer Probes - In	TwoPint.PeerDist.BlueGreenLeader.exe	Any	Local Subnet	3702	Any	UDP	Yes
2Pint Software StifleR - Blue Leader Peer Probe Match - In	TwoPint.PeerDist.BlueGreenLeader.exe	Any	Any	Any	3702	UDP	Yes
2Pint Software StifleR - mDNS - In	TwoPint.PeerDist.BlueGreenLeader.exe	Any	Local Subnet	5353	Any	UDP	Yes

Stifler Client Local Firewall Port openings required - Outcoming

Name	Executable	Local Address	Remote Address	Local Port	Remote Port	Protocol	Customizable
Beacon - iPerf packets		Any	Stifler Beacons	Any	5201	UDP	Yes
Beacon - FastPing		Any	Stifler Beacons	Any	5200	TCP	Yes
Blue Leader Data to requesting Peer - Out	SYSTEM	Any	Any	Any	1338	TCP	Yes
Blue Leader Data From Remote Peer - Out	TwoPint.PeerDist.BlueGreenLeader.exe	Any	Any	1337	Any	TCP	Yes
Green Leader Peer Data - Out	TwoPint.PeerDist.BlueGreenLeader.exe	Any	Any	Any	1337.1339	TCP	Yes
Blue Leader Peer Data - Out	TwoPint.PeerDist.BlueGreenLeader.exe	Any	Local Subnet	Any	1338	TCP	Yes
Peer Probes - Out	TwoPint.PeerDist.BlueGreenLeader.exe	Any	Local Subnet	3702	Any	UDP	Yes
Blue Leader Peer Probe Match - Out	TwoPint.PeerDist.BlueGreenLeader.exe	Any	Any	Any	3702	UDP	No
Blue Leader Probe Port	TwoPint.PeerDist.BlueGreenLeader.exe	Any	Any	3703	3703	UDP	Yes
mDNS - Out	TwoPint.PeerDist.BlueGreenLeader.exe			Any	5353	UDP
Access to Stifler Service	Stifler.Client.exe	Any	Any or Stifler server	Any	1414	UDP	No
Access to Stifler Service	Stifler.Client.exe	Any	Any or Stifler server	Any	1414	TCP	No
Access to Stifler Service	Twopint.remotetools.host.exe	Any	Any or Stifler server + Action hubs	Any	1415	UDP	No
Access to Stifler Service	Twopint.remotetools.host.exe	Any	server + Action hubs	Any	1415	TCP	No
Access to Stifler Service	Browser	Any	Stifler Server	Any	9000	TCP	No
Access to Stifler Service	Browser	Any	Any or Stifler server	Any	1414	TCP	No
Access to Stifler Service	Browser	Any	Any or Stifler server + Action hubs	Any	1415	TCP	No

BranchCache Local Firewall Port openings required - Incoming

Name	Executable	Local Address	Remote Address	Local Port	Remote Port	Protocol	Customizable
BranchCache Content Retrieval (HTTP-In)	SYSTEM	Any	Any	1337	Any	TCP	Yes
BranchCache Hosted Cache Server (HTTP-In)	SYSTEM	Any	Any	1339.443	Any	TCP	Yes
BranchCache Peer Discovery (WSD-In)	%SYSTEMROOT%\system32\svchost.exe	Any	Local Subnet	3702	Any	TCP	No

BranchCache Local Firewall Port openings required - Outcoming

Name	Executable	Local Address	Remote Address	Local Port	Remote Port	Protocol	Customizable
BranchCache Content Retrieval (HTTP-Out)	SYSTEM	Any	Any	Any	1337	TCP	Yes
BranchCache Hosted Cache Client (HTTP-Out)	SYSTEM	Any	Any	Any	1339.443	TCP	Yes
BranchCache Hosted Cache Server(HTTP-Out)	SYSTEM	Any	Any	1339.443	Any	TCP	Yes
BranchCache Peer Discovery (WSD-Out)	%SYSTEMROOT%\system32\svchost.exe	Any	Local Subnet	Any	3702	UDP	No