{
  "port": 7800,
  "protocol": "tcp",
  "service": "Apple Software Restore / JGroups cluster transport",
  "oneLiner": "IANA's Apple Software Restore port, and the default bind port for JGroups clustering under Infinispan, WildFly and Keycloak.",
  "whatItIs": "Two unrelated things answer here. IANA registers 7800 as asr, Apple Software Restore, the multicast disk-imaging service used to push macOS images across a lab network. Far more commonly on a server, 7800 is the JGroups TCP transport: Keycloak's documentation notes that for the embedded Infinispan cluster \"by default, port 7800 is used\" for unicast data between nodes, with failure detection at an offset of 50000 (57800). So an open 7800 on a Java application host usually means cluster members are talking to each other.",
  "exposure": {
    "verdict": "never",
    "note": "JGroups cluster transport is not authenticated in a default configuration — a host that can reach it can attempt to join the cluster and read replicated cache contents, including sessions. Bind it to a private interface."
  },
  "checkCommand": "nc -vz TARGET 7800",
  "links": [
    {
      "title": "Keycloak — Configuring distributed caches (JGroups bind port 7800)",
      "url": "https://www.keycloak.org/server/caching",
      "kind": "official-docs"
    },
    {
      "title": "IANA port registry — 7800 (asr)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=7800",
      "kind": "iana"
    }
  ]
}