Seeker Architecture and Communications
High-level architecture of Seeker and communication flows between its internal components and integrated external systems in a typical on-prem deployment.
The following table lists the inbound connection details of the Seeker internal components and integrated external systems depicted in the above diagram. The listed port numbers are default, some of them can be customized.
| Source | Destination | Protocols | Destination ports (default) | Related information |
|---|---|---|---|---|
| Agents, Web UI/API, CI/CD | NGINX reverse proxy | HTTP/HTTPS/WebSockets | 8080/8443 | Customize Seeker Connection Settings |
| NGINX reverse proxy | Sensor process | HTTP | 8082 | Localhost only |
| NGINX reverse proxy | Server process | HTTP | 9911 | Localhost only |
| Sensor process, Server process | PostgreSQL database | TCP/IP | 5432 | Localhost only |
| Server process | Mail server | SMTP/SMTPS | 25 | Configure SMTP Account |
| Server process | LDAP | LDAP/LDAPS | 389/636 | Configure LDAP/Active Directory |
| Server process | SSO | SAML 2.0 | 443 | Configure SAML 2.0-based SSO |
| Server process | Black Duck, BDBA | HTTPS | 443 | Install and Configure Black Duck Binary Analysis |
| Server process | Jira, bug tracking systems | HTTPS | 443 | Configure Bug Tracking Integration |
| Server process | Secure Code Warrior | HTTPS | 443 | Configure Secure Code Warrior |