Configuring Network Ports in Posit Connect
This section describes how to configure network ports in Posit Connect.
By default, Connect uses port 3939 for HTTP and port 443 for HTTPS.
Configuring a custom HTTP port
You can configure custom network ports by editing the configuration file and restarting Connect.
For example, to change the HTTP port to 80, add the following lines to the Connect configuration file:
File: etc/rstudio-connect/rstudio-connect.gcfg
[HTTP]
Listen = :80Then restart Connect by running the following command:
Terminal
sudo systemctl restart rstudio-connectConfiguring an IPv6 address
Connect supports listening on IPv6 addresses. Enclose the IPv6 address in brackets when specifying a listen address.
For example, to listen on all IPv6 interfaces on port 3939:
File: etc/rstudio-connect/rstudio-connect.gcfg
[HTTP]
Listen = [::]:3939To listen on the IPv6 loopback address ([::1], the IPv6 equivalent of 127.0.0.1):
File: etc/rstudio-connect/rstudio-connect.gcfg
[HTTP]
Listen = [::1]:3939On Linux, Connect binds [::] as a dual-stack socket. It accepts both IPv6 and IPv4 connections, so you do not need a second listen address for IPv4.
Because [::] also accepts IPv4 connections, bind a specific IPv6 address when your deployment requires an IPv6-only listener.
For example:
File: etc/rstudio-connect/rstudio-connect.gcfg
[HTTP]
Listen = [2001:db8::1]:3939In IPv6-only environments, license activation requires a license file or a floating license server reachable over IPv6, because the Posit licensing server is not reachable from IPv6-only networks. See the licensing documentation for more information.
Network ports reference
The following table lists all network ports used by Connect. Use this as a reference when configuring firewalls and security groups.
| Port | Protocol | Direction | Purpose | Configuration |
|---|---|---|---|---|
| 3939 | HTTP | Inbound | Default Connect web interface | HTTP.Listen |
| 443 | HTTPS | Inbound | Connect web interface (when TLS is configured) | HTTPS.Listen |
| 80 | HTTP | Inbound | HTTP redirect to HTTPS (when configured) | HTTPRedirect.Listen |
| 5432 | TCP | Outbound | PostgreSQL database (external) | Postgres.URL |
| 5432 | TCP | Inbound | Content database proxy (when enabled) | ContentDatabase.Listen |
| 443 | HTTPS | Outbound | Posit licensing server (wyday.com) | Required for license key activation |
| 8999 | TCP | Outbound | Floating license server | Licensing.LicenseType |
| 2049 | TCP | Outbound | NFS or EFS shared storage (high-availability configurations) | OS-level mount |
| 389/636 | TCP | Outbound | LDAP/LDAPS authentication | LDAP.ServerAddress |
| Varies | TCP | Outbound | OpenTelemetry collector endpoint | OTLPEndpoint |
| 443 | HTTPS | Outbound | Package repositories, Posit Package Manager | Application-level |
| 443 | HTTPS | Outbound | What’s New feed (posit-dev.github.io) | Server.WhatsNewEnabled |
| 25/465/587 | TCP | Outbound | SMTP email delivery | SMTP.Port |
For a complete list of ports across all Posit products (Connect, Posit Workbench, and Package Manager), see the Posit networking guide.
Additional documentation
For more information on network ports and other related settings, refer to the HTTP settings and HTTPS settings in the Configuration Appendix of this guide.