Ports¶
Status: Current | Last reviewed: 2026-10-20
Master port matrix. Vanguard uses host ports directly; cluster uses Service ports.
VS Code forwarded ports¶
The devcontainer explicitly forwards these stable local-dev ports:
3001, 3002, 3004, 3478, 5432, 6379, 8080, 8085, 8087, 8088,
8089, 8188, 9000, 9001, 50051.
VS Code auto-forwarding is disabled in workspace settings; otherwise the Ports panel can show different counts per environment as it discovers transient listeners from Overmind, Next.js, MCP tools, or editor helper processes.
The optional multimodal Cloud Run browser proxy uses loopback port 18085. Add it manually in the Ports panel and keep visibility private; the proxy forwards requests using your Google identity.
Application services¶
| Port | Service | Protocol |
|---|---|---|
| 1234 | conversation-api | gRPC |
| 3000 | ari-controller | HTTP callbacks |
| 3001 | ai-manager | HTTP |
| 3002 | surface-app | HTTP |
| 3003 | crm-dashboard (optional gitignored app) | HTTP |
| 3030 | webex-connector-go | gRPC/control |
| 3031 | connect-scv-translator | HTTP |
| 3032 | five9-voicestream-connector-go | gRPC/control |
| 3035 | Ari Assistant (separate browser app) | HTTP / SSE, loopback |
| 3036 | Poppy Company (separate gateway) | HTTP, loopback |
| 3050 | proficiency (separate research app) | HTTP / WS, loopback |
| 3051 | proficiency frontend development server | HTTP |
| 3510 | collab-gateway | WS + HTTP |
| 3520 | multimodal-service | HTTP / MCP |
| 3521 | teams-agent-gateway (optional; disabled by default) | HTTP |
| 3530 | payment-vault (optional; disabled by default) | HTTP |
| 6768 | Orca headless runtime (Vanguard personal service) | WebSocket |
| 8000 | async-agent | HTTP |
| 8001 | agent-host (admin) | HTTP |
| 8002 | agent-host (HTTP tools) | HTTP |
| 8003 | agent-host (MCP) | HTTP / streamable |
| 8010 | code-executor | HTTP |
| 8011 | antigravity-runner | HTTP |
| 8012 | workspace-agent-runner | HTTP |
| 8075 | ClearConnect PSP API (optional) | HTTP / SSE / AudioHook, loopback |
| 8076 | ClearConnect private Genesys connector (optional) | HTTP / WS, loopback |
| 8080 | conversation-api; ai-orchestrator service additional port in cluster | HTTP / SSE; ai-orchestrator metrics/health/debug gateway |
| 8081 | ai-orchestrator (Vanguard local) | HTTP metrics/health/debug gateway |
| 8085 | media-proxy | HTTP |
| 8089 | genesys-connector-go (HTTP / WS) | HTTP |
| 8090 | catalog-builder | HTTP |
| 8091 | knowledge-engine (optional gitignored app) | HTTP |
| 8092 | webex-app-manager | HTTP |
| 8093 | connect-kvs-connector | HTTP |
| 8094 | mkdocs-developer | HTTP |
| 8095 | five9-voicestream-connector-go (HTTP) | HTTP |
| 8096 | mkdocs-userguide | HTTP |
| 8097 | status-page (per-env; also fleet aggregator on the tooling box) | HTTP |
| 8444 | code-server (Vanguard local) | HTTPS |
| 8100 | crm-api (optional gitignored app) | HTTP |
| 8101 | connect-scv-translator (webpack-dev-server client) | HTTP |
| 3005 | happy-relay (tooling box only, happy.trueserve.deloitte.com ingress; envs connect outbound-only — no local port) |
HTTP / WS |
| 18080 | media-proxy | gRPC |
| 50051 | ai-orchestrator | gRPC |
Telephony (5000–6000, 8087, plus media ranges)¶
| Port | Service | Protocol |
|---|---|---|
| 5060/UDP, 5060/TCP | Asterisk + Kamailio | SIP |
| 5061/TCP | Kamailio | SIP TLS |
| 5065/TCP | Kamailio | Genesys BYOC |
| 8087 | Asterisk | ARI HTTP + WS |
| 8088 | Janus | Admin |
| 8188 | Janus | WebSocket signaling |
| 7088 | Janus | Internal admin |
Media (UDP ranges)¶
| Range | Service |
|---|---|
| 10000–19999/UDP | Asterisk RTP |
| 20000–20499/UDP | Janus RTP/SRTP |
| 20000–20499/UDP | rtpengine media |
| 49152–65535/UDP | coturn relay |
| 3478/UDP, 3478/TCP, 5349/TCP | coturn STUN/TURN |
Infrastructure¶
| Port | Service |
|---|---|
| 5432 | Postgres |
| 6432 | pgbouncer (when enabled) |
| 6379 | Redis |
| 5672 | RabbitMQ AMQP |
| 15672 | RabbitMQ management |
| 7474, 7687 | Neo4j HTTP, Bolt |
| 9000, 9001 | MinIO API, console |
Local service allocation¶
A frequent source of collisions in Vanguard. Pick the next free unassigned port near this range when adding a new local-only HTTP service:
| Port | Owner |
|---|---|
| 8000 | async-agent |
| 8001–8003 | agent-host |
| 8010 | code-executor |
| 8011 | antigravity-runner |
| 8012 | workspace-agent-runner |
| 8080 | conversation-api |
| 8081 | ai-orchestrator HTTP metrics/health/debug gateway |
| 8085 | media-proxy |
| 8087 | Asterisk ARI |
| 8088 | Janus admin |
| 8089 | genesys-connector-go (HTTP / WS) |
| 8090 | catalog-builder |
| 8091 | knowledge-engine (optional gitignored app) |
| 8092 | webex-app-manager |
| 8093 | connect-kvs-connector |
| 8094 | mkdocs-developer (developer.${PUBLIC_FQDN}) |
| 8095 | five9-voicestream-connector-go (HTTP) |
| 8096 | mkdocs-userguide (docs.${PUBLIC_FQDN}) |
| 8097 | status-page (per-env; also fleet aggregator on the tooling box) |
| 8098 | webex-connector-go health |
| 8100 | crm-api (optional gitignored app) |