HA TCP Port 5671

5671 (TCP) is used for SSL encrypted RabbitMQ messaging between the primary & secondary Orion servers, as well as any additional polling engines.

Thanks aLTeReGo, just to clarify

Orion Primary <> Orion Standby (HA WAN)
Orion Primary <> APE (Primary)
Orion Primary <> APE (Standby)

Orion Standby <> APE (HA Primary)

Orion Standby <> APE (HA Standby)

Does it need to point to VIP or the Pool IP Directly?

That is correct sir. It should be the IP's of the individual members if you're defining only the destination IP address in your access control lists. If you are also defining the source IP, then you will need to include the VIP as well as a potential source.

Thanks, we do want to include the VIP as a source as it has been given an IP appropriate to ensure polling from the VIP but I wasn’t sure if this port was needed between the two pool members of a HA pair or just from the each pool member to the VIP of other pool members?

Thanks, we do want to include the VIP as a source as it has been given an IP appropriate to ensure polling from the VIP but I wasn’t sure if this port was needed between the two pool members of a HA pair or just from the each pool member to the VIP of other pool members?

It is not required between individual APEs in a pool, but it is required from each APE pool member to both main Orion servers if they're participating in an HA pool.

If it's easier to understand excluding HA from the equation, all APE's must have this port open the main Orion server. if they're in an HA pool, then that means both members of the HA pool must have this port open to the main Orion server. If he main Orion server is in an HA pool, then both members of that main HA pool must have this port open also, in addition to any APEs.

Excellent, thank you for the clarification.

Sorry but are you able to confirm, if that’s the same for the new Cortex Service on port 17799 ?

TCP Port 17799 communicates exclusively through localhost. It does not need to be opened externally to any network hosts.