Skip to main content

Network ports

Open network ports selectively based on the network services you need to expose for administrators, end users, and email support.

Administrative ports

Some administrative ports are required to configure お使いの GitHub Enterprise Server インスタンス and run certain features. Administrative ports are not required for basic application use by end users.

PortServiceDescription
8443HTTPSSecure web-based [Management Console]. Required for basic installation and configuration.
8080HTTPPlain-text web-based [Management Console]. Not required unless TLS is disabled manually.
122SSHShell access for お使いの GitHub Enterprise Server インスタンス. Required to be open to incoming connections between all nodes in a high availability configuration. The default SSH port (22) is dedicated to Git and SSH application network traffic.
1194/UDPVPNSecure replication network tunnel in high availability configuration. Required to be open for communication between all nodes in the configuration.
123/UDPNTPRequired for time protocol operation.
161/UDPSNMPRequired for network monitoring protocol operation.
9103/TCPHTTPRequired for future support of Prometheus scraping.

Application ports for end users

Application ports provide web application and Git access for end users.

PortServiceDescription
443HTTPSAccess to the web application and Git over HTTPS.
80HTTPAccess to the web application. All requests are redirected to the HTTPS port if TLS is configured.
22SSHAccess to Git over SSH. Supports clone, fetch, and push operations to public and private repositories.
9418GitGit protocol port supports clone and fetch operations to public repositories with unencrypted network communication. インスタンスでプライベートモードを有効化した場合、このポートをオープンする必要があるのは、匿名Git読み取りアクセスも有効化している場合のみです。 詳しくは、「Enforcing repository management policies in your enterprise」を参照してください。

警告: ロード バランサーの HTTPS 接続を終了する場合、ロード バランサーから GitHub Enterprise Server への要求も HTTPS を使用する必要があります。 接続の HTTP へのダウングレードはサポートされません。

Email ports

Email ports must be accessible directly or via relay for inbound email support for end users.

PortServiceDescription
25SMTPSupport for SMTP with encryption (STARTTLS).

GitHub Actions ports

GitHub Actions ports must be accessible for self-hosted runners to connect to お使いの GitHub Enterprise Server インスタンス. For more information, see "セルフホステッド ランナーの概要."

PortServiceDescription
443HTTPSSelf-hosted runners connect to お使いの GitHub Enterprise Server インスタンス to receive job assignments and to download new versions of the runner application. Required if TLS is configured.
80HTTPSelf-hosted runners connect to お使いの GitHub Enterprise Server インスタンス to receive job assignments and to download new versions of the runner application. Required if TLS is not configured.

If you enable automatic access to GitHub.com actions, GitHub Actions will always search for an action on お使いの GitHub Enterprise Server インスタンス first, via these ports, before checking GitHub.com. For more information, see "Enabling automatic access to GitHub.com actions using GitHub Connect."

GitHub Connect ports

If you enable GitHub Connect, the connection between GitHub Enterprise Server and GitHub.com uses HTTPS over ports 443 or 80, and TLS is required. For more information, see "About GitHub Connect."

Further reading