Elasticsearch Understanding and Configuring Elasticsearch Ports

By Opster Team

Updated: Nov 6, 2023

| 2 min read

Quick links


Elasticsearch utilizes various ports for its operations. These ports are crucial for communication between nodes, client requests, and inter-cluster communication. This article will delve into the details of Elasticsearch ports, their default settings, and how to configure them to suit your specific needs.

Elasticsearch primarily uses two ports: 9200 and 9300. Port 9200 is the default HTTP port for Elasticsearch, used for client communication and sending REST requests. On the other hand, port 9300 is the default transport port, used for node-to-node communication within the cluster.

Default Port Settings

By default, Elasticsearch binds to loopback addresses for HTTP (9200) and transport (9300) communication. This means that, out of the box, Elasticsearch is configured to only accept connections from the same machine where it is installed.

The default settings for these ports are as follows:
– `http.port`: 9200-9300
– `transport.port`: 9300-9400

These settings mean that Elasticsearch will try to bind to the first available port in the range. If port 9200 is not available, it will try 9201, then 9202, and so on.

Configuring Elasticsearch Ports

You can configure Elasticsearch to use specific ports by modifying the `elasticsearch.yml` configuration file. This file is typically located in the `/etc/elasticsearch` or `/usr/local/etc/elasticsearch` directory, depending on your installation.

To change the HTTP port, you can modify the `http.port` setting. For example, to set the HTTP port to 9201, you would add the following line to your `elasticsearch.yml` file:

http.port: 9201

Similarly, to change the transport port, you can modify the `transport.port` setting. For example, to set the transport port to 9301, you would add the following line:

transport.port: 9301

After making these changes, you will need to restart Elasticsearch for the new settings to take effect.

Binding to a Specific IP Address

In addition to changing the port numbers, you can also configure Elasticsearch to bind to a specific IP address. This is useful if you want to restrict which networks can access your Elasticsearch cluster.

To bind Elasticsearch to a specific IP address, you can modify the `network.host` setting in the `elasticsearch.yml` file. For example, to bind Elasticsearch to the IP address, you would add the following line:


Again, you will need to restart Elasticsearch for the new settings to take effect.

Security Considerations

While configuring Elasticsearch ports, it’s essential to consider the security implications. Exposing Elasticsearch to the public internet can lead to security risks, such as unauthorized access or data breaches. Therefore, it’s recommended to use firewall rules or network security groups to restrict access to your Elasticsearch ports.


In conclusion, understanding and properly configuring Elasticsearch ports is crucial for the optimal operation of your Elasticsearch cluster. By adjusting the default settings, you can tailor your Elasticsearch installation to your specific needs and ensure the security of your data. 

How helpful was this guide?

We are sorry that this post was not useful for you!

Let us improve this post!

Tell us how we can improve this post?