What ports does `gaiad` use?

By default gaiad uses the following ports:

• 26656
  • p2p networking port to connect to the tendermint network
  • On a validator this port needs to be exposed to sentry nodes
  • On a sentry node this port needs to be exposed to the open internet
• 26657
  • Tendermint RPC port
  • This should be shielded from the open internet
• 26658
  • Out of process ABCI app
  • This should be shielded from the open internet

Some optional ports that might be used by gaiad are as follows:

• 26660
  • Prometheus stats server
  • Stats about the gaiad process
  • Needs to be enabled in the config file.
  • This should be shielded from the open internet
• 1317
  • Light Client Daemon
  • For automated management of anything you can do with the CLI
  • This should be shielded from the open internet

Continue with proxy discussion on Riot chat. For those ports you may want to use to as RESTful endpoint, e.g. 26657 and 1317, you may consider proxy them to an external interface via an http proxy like Nginx or Caddy. The idea is to treat them like a web service which the RESTful requests to the RPC ports will be done over https. Then you can have control over the RPC ports of the node. You may configure rate limiting on the http proxy or make requests with user authentication using a web app. In this sense, the ports will not expose to external directly and you node is protecting from receiving too many requests suddenly.

@jack Can you confirm all references to port 46656 should be changed to 26656 in the config.toml file?

Could you please point me to a few ref links to research how to do this?

You can see the default port has been changed in the config.toml and you can read the change log.

cosmos/cosmos-sdk/blob/bb1f1a21bf540dad6b1d39d2c013b5cef59559c0/CHANGELOG.md#0200

# Changelog

## 0.21.0

*July 13th, 2018*

BREAKING CHANGES
* [x/stake] Specify DelegatorAddress in MsgCreateValidator
* [x/stake] Remove the use of global shares in the pool
   * Remove the use of `PoolShares` type in `x/stake/validator` type - replace with `Status` `Tokens` fields
* [x/auth] NewAccountMapper takes a constructor instead of a prototype
* [keys] Keybase.Update function now takes in a function to get the newpass, rather than the password itself

FEATURES
* [baseapp] NewBaseApp now takes option functions as parameters

IMPROVEMENTS
* Updated docs folder to accommodate cosmos.network docs project
* [store] Added support for tracing multi-store operations via `--trace-store`
* [store] Pruning strategy configurable with pruning flag on gaiad start

You may start with the documentation of Nginx and Caddy.