Appendix D. List of Network Ports Used by Components

If all components are on the same server, they communicate locally, and you will only have to open port 80 (for HTTP) and/or port 443 (for HTTPS).

If the components are on different servers, then for them to communicate, you need to open the following ports:

vxCube Web (vxcube_web_host), in:

•80 (for HTTP)

•443 (for HTTPS)

•21 (storage, ONLY for other nodes), out:

•hyperbox_api_host:5003

vxCube DB (hyperbox_api_host), in:

•25672 (RabbitMQ, inter-node communication)

•4369 (RabbitMQ, peer discovery service)

•5672 (RabbitMQ, AMQP)

•5003 (vxcube flow api app), out:

•vxcube_web_host:21

Windows/Android/Linux Sandbox Service (hyperbox_hosts, dimas_hosts, linuxbox_hosts), out:

•hyperbox_api_host:25672

•hyperbox_api_host:4369

•hyperbox_api_host:5672

•vxcube_web_host:21

•vpn_server:vpn_port (EXTERNAL, redirect traffic from sandboxes)

•proxy_server:proxy_port (EXTERNAL, depends on analysis settings)

Dr.Web Scan Service (drweb_srv_hosts), out:

•hyperbox_api_host:25672

•hyperbox_api_host:4369

•hyperbox_api_host:5672

•vxcube_web_host:21

•update.geo.drweb.com:80 (EXTERNAL, AV updates)

Yara Service (yara_hosts), out:

•hyperbox_api_host:25672

•hyperbox_api_host:4369

•hyperbox_api_host:5672

•vxcube_web_host:21

Analyser Service (evparser_hosts), out:

•hyperbox_api_host:25672

•hyperbox_api_host:4369

•hyperbox_api_host:5672

•vxcube_web_host:21

•links-checker.dev.drweb.com:80 (EXTERNAL, optional, domain checker)