{
  "port": 8300,
  "protocol": "tcp",
  "service": "HashiCorp Consul server RPC (IANA: tmi)",
  "oneLiner": "Consul's server RPC port — how agents and servers talk to the cluster leader.",
  "whatItIs": "IANA registers 8300 as tmi, \"Transport Management Interface\", from 2006, but in practice a listener here is HashiCorp Consul: 8300/tcp is the server RPC port that Consul documents as \"Consul internal communication with servers\", used for client-to-server and server-to-server RPC and Raft traffic. It appears on Consul server nodes, which usually also show 8301/8302 (Serf LAN/WAN), 8500 (HTTP API) and 8600 (DNS). Seeing 8300 without those neighbours means you are probably not looking at Consul.",
  "exposure": {
    "verdict": "never",
    "note": "This is the cluster's internal control channel. Reachable from the internet it is a path to the Raft log and the whole catalog; keep it on a private network with TLS and gossip encryption enabled."
  },
  "checkCommand": "sudo lsof -nP -iTCP:8300 -sTCP:LISTEN",
  "links": [
    {
      "title": "Consul — Required ports",
      "url": "https://developer.hashicorp.com/consul/docs/reference/architecture/ports",
      "kind": "official-docs"
    },
    {
      "title": "HashiCorp Consul source repository",
      "url": "https://github.com/hashicorp/consul",
      "kind": "github"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    }
  ]
}
