{
  "port": 7007,
  "protocol": "both",
  "service": "AFS Basic OverSeer Server (bosserver)",
  "oneLiner": "The AFS BOS Server — the process that starts, stops, and restarts every other AFS server daemon.",
  "whatItIs": "IANA registers 7007 as afs3-bos, the basic overseer process. bosserver runs on every AFS file and database server, reads BosConfig to know which daemons to keep alive, and answers `bos` commands to start, stop, restart, and salvage them. It is the control plane of an AFS cell: whoever can issue authenticated bos commands controls what runs on the server. Like the rest of AFS it uses Rx over UDP.",
  "exposure": {
    "verdict": "never",
    "note": "This is remote process control for the whole cell; restrict it to the AFS server network and rely on Kerberos-authenticated admin principals, never on reachability alone."
  },
  "checkCommand": "bos status TARGET -noauth",
  "links": [
    {
      "title": "OpenAFS Reference — bosserver(8)",
      "url": "https://docs.openafs.org/Reference/8/bosserver.html",
      "kind": "official-docs"
    },
    {
      "title": "OpenAFS source repository",
      "url": "https://github.com/openafs/openafs",
      "kind": "github"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 7007",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=7007",
      "kind": "iana"
    }
  ]
}