SmartSense Gateway to Hortonworks
Hortonworks does not initiate communications to the SmartSense Gateway, all communication is initiated by the SmartSense Gateway to Hortonworks. For this interaction, the following ports are used:
![[Note]](../common/images/admon/note.png) | Note |
|---|---|
Using an SFTP-based gateway is deprecated, effective end of April 2018. If you are using SFTP-based gateway you should upgrade to HTTPS-based gateway. |
| Source Component | Destination Component | Destination Port | Purpose |
|---|---|---|---|
| Gateway | Hortonworks | tcp/2222 | SFTP (Deprecated) |
| Gateway | Hortonworks | tcp/443 | HTTPS bundle upload |
As bundles are captured, the HST server uses the two-way SSL communication channel to securely stream the bundle file to the SmartSense Gateway. After this process starts, the SmartSense Gateway opens up a secure connection to Hortonworks, using the SFTP port to upload the bundle.
You have two options when configuring the communication between the SmartSense Gateway and Hortonworks:
Allow firewall access from the Gateway to a CNAME using port 2222 or 443.
The Hortonworks SFTP and HTTPS servers utilize Elastic Load Balancing from Amazon Web Services. The CNAME is recommended as the number of instances, and IPs of instances used by the load balancer are fluid. Using the CNAME provides the greatest availability.
Allow firewall access from the Gateway to a pair of static IPs using port 2222 or 443.
These IPs do not change, and they use "round-robin" DNS for load balancing. This is the least preferred option, because instance availability is not quickly updated in DNS.
Details about both options are available at the following location: https://support.hortonworks.com/s/article/SmartSense-Gateway-setup