Port 2375: Docker
Port 2375 is the Docker Engine API without TLS, giving whoever can reach it full control over every container on the host, equivalent to root access. It should only ever be bound to localhost or a trusted internal network.
TCPInfrastructure & orchestrationUnencrypted by default
| Port number | 2375 |
|---|---|
| Service | Docker daemon API (unencrypted) |
| Protocol | TCP |
| Category | Infrastructure & orchestration |
| Default encryption | No |
Security note. Port 2375 is not encrypted by default. Restrict it to trusted networks, or use an encrypted alternative where one exists, to avoid exposing credentials and data in transit.
Frequently asked questions
What is port 2375 used for?
Port 2375 is the Docker Engine API without TLS, giving whoever can reach it full control over every container on the host, equivalent to root access. It should only ever be bound to localhost or a trusted internal network.
Is port 2375 TCP or UDP?
Port 2375 (Docker) uses TCP.
Is port 2375 secure?
Port 2375 is not encrypted by default. Where possible, use an encrypted alternative or tunnel it over TLS or a VPN.
Should I open port 2375 on my firewall?
Only if you specifically need Docker. Expose it to the smallest set of trusted sources, and never open database or Windows-service ports to the whole internet.