Ports Used

This page lists the default port ranges used by Infinite Scale services. It is for administrators configuring firewalls, load balancers or reverse proxies. You should be familiar with basic networking.

2 min read · Level: beginner · Last updated for oCIS 9.0.0-rc.1 on 25.10.2026

Introduction

Infinite Scale uses ports for communication between services. This page provides an overview of default port ranges.

Used Port Ranges

The following port ranges are used by services:

Port Range Service

9000-9010

reserved for Infinite Scale

9100-9104

web

9105-9109

hello

9110-9114

ocs

9115-9119

webdav

9120-9124

graph

9125-9129

policies

9130-9134

idp

9135-9139

sse

9140-9141

frontend

9142-9143

gateway

9144-9145

users

9146-9147

auth-basic

9148-9149

auth-bearer

9150-9153

sharing

9154-9156

storage-shares

9157-9159

storage-users

9160-9162

groups

9163

ocdav (also see port 9350)

9164

groups

9165

app-provider

9166-9169

auth-machine

9170-9174

notifications

9175-9179

storage-publiclink

9180-9184

FREE (formerly used by accounts)

9185-9189

thumbnails

9190-9194

settings

9195-9197

activitylog

9198-9199

auth-service

9200-9204

proxy

9205-9209

proxy

9210-9214

userlog

9215-9219

storage-system

9220-9224

search

9225-9228

FREE

9229

audit (debug server)

9230-9234

nats

9235-9239

idm

9240-9244

app-registry

9245-9249

auth-app

9250-9254

ocis server (runtime)

9255-9259

postprocessing

9260-9264

clientlog

9265-9269

invitations

9270-9274

eventhistory

9275-9279

webfinger (also see 9277 antivirus debug server)

9280-9284

ocm

9285-9289

storage-users (vault)

9300-9304

collaboration

9350-9354

ocdav

FAQ

Which Port Do Clients Connect To?

Clients connect to the proxy on port 9200 (HTTPS). All other ports are for service-to-service communication on the internal network.

Do I Need to Open All These Ports Externally?

No. Only port 9200 (the proxy) needs to be reachable by clients. The remaining ports are bound to 127.0.0.1 by default and are used for internal service communication; expose them only on a trusted internal network.

Where Can I Change a Service Port?

Each service port is configurable through its environment variables, for example PROXY_HTTP_ADDR for the proxy or GRAPH_HTTP_ADDR for the graph service. See the individual service pages.