This document outlines the network ports and protocols required for vCenter Server and HCX components to communicate within sites and across the WAN. It lists the port numbers and protocols used for services like NSX API access, HCX transport and crypto, syslog, name resolution, and workload mobility functions like vMotion and bulk migration between sites.

1. vCenter
Server
HCX WAN Transport/Suite B Crypto
(IKEv2,Certificate Based) UDP-4500
hcxplus.vmware.com
WAN
Boundary:
Internet
Or
Private
Circuit
NSX API (REQUIRED)
TCP-443
NSX API (OPTIONAL)
TCP-443
Internet
Boundary
HCX Plus Network Ports
Site Connections
hybridity-depot.vmware.com
SaaS Adapter TCP-443
HCX-Updates (hybridity-depot) TCP-443
vSphere API TCP-443 Web-Client/Plugin TCP-9443
HCX HTTPS TCP-443
vSphere (5.5) SSO / Lookup Svc TCP-7444
vSphere (6.0+) SSO / Lookup Svc TCP-443
Syslog
Server Remote Syslog TCP/UDP-514
Remote Syslog TCP/UDP-514 Syslog
Server
Remote Syslog TCP/UDP-514
Remote Syslog TCP/UDP-514
ESX Auth TCP-80, TCP-443
HCX Cold Migration (NFC) TCP-902
HCX X-Cloud vMotion TCP-8000
HCX Bulk Migration TCP-31031, TCP-44046
ESX Auth TCP-80, TCP-443
HCX Cold Migration (NFC) TCP-902
HCX X-Cloud vMotion TCP-8000
HCX Bulk Migration TCP-31031, TCP-44046
vSphere (5.5) SSO / Lookup Svc TCP-7444
vSphere API TCP-443
HCX HTTPS TCP-443
OVF Import TCP-80, TCP-443, TCP-902
vSphere (6.0+) SSO / Lookup Svc TCP-443
Web-Client/Plugin TCP-9443
OVF Import TCP-80, TCP-443, TCP-902
HCX Site Manager
(HCX Cloud)
VM Networks Extended VM Networks
HCX L2 Trunk | Sink Port
HCX L2 Trunk | Sink Port
HCX+ WAN FLOWS
SDDC INTEGRATION FLOWS
COMMON MGMT PROTOCOLS
Name Resolution TCP/UDP 53
VPXA Heartbeat UDP-902
VPXA Listener TCP-443 Auth/Lic Mgmt TCP-902
HCX Configuration Channel
TCP-9443
HCX Configuration Channel
TCP-9443
DNS
Server
VPXA Heartbeat UDP-902
VPXA Listener TCP-443 Auth/Lic Mgmt TCP-902
DNS
Server
Name Resolution TCP/UDP 53
Name Resolution TCP/UDP 53
Remote Syslog TCP/UDP-514
Time Sync UDP-123
Name Resolution TCP/UDP 53
Remote Syslog TCP/UDP-514
DNS
Server
NTP
Server
Time Sync UDP-123
Syslog
Server
Bulk Migration Ctl
TCP-8123
HCX Config Channel
TCP-9443
VPXA Listener
TCP-443
Bulk Migration Ctl
TCP-8123
HCX Config Channel
TCP-9443
VPXA Listener
TCP-443
vSphere Distributed Switch
NSX Transport Zone
vMotion
VMkernel
Mgmt
VMkernel
HCX Site Manager
(HCX Connector)
HCX-IX-I
HCX-NE-I
CCLI Perftest TCP-4500
HCX WAN Transport/Suite B Crypto
(IKEv2,Certificate Based) UDP-4500
Transport Analytics UDP-4500
HCX-IX-R
HCX L2 Bridge Port | NSXv Sink Port | NSX-T Learning Port
(SRC NSX Segment Extension,
NSX Tag Migration, V2T)
NSX NSX
DNS
Server
NTP
Server
Syslog
Server
vCenter Server
Workload Mobility Admin
VMware
Service
Operator
vCenter
Server
vSphere Distributed Switch
NSX Transport Zone
HCX-NE-R
vMotion
VMkernel
Mgmt
VMkernel
vCenter Server
connect.hcx.vmware.com
SaaS Adapter TCP-443
HCX-Updates (hybridity-depot) TCP-443
Site Connections
Site Pairing
(SSL/TLS 1.2) TCP-443