Skip to content

Ports and Endpoints

Every port MetaMiner listens on in a Power BI deployment, and the Microsoft endpoints it calls in each cloud.

For firewall planning see Network and Microsoft Endpoints; for exposure guidance see Network Exposure.

flowchart LR
  MMC[MetaMiner Client] -->|TCP 49714| MMS[MetaMiner Server]
  Browser[Web browser] -->|TCP 49714 /web| MMS
  MMS -->|loopback 49717| MMWA[Web Apps]
  MMS -->|TCP 49614| MMDB[(MMDB)]
  MMWA --> MMDB
  MMS -->|HTTPS 443| MS[Microsoft sign-in, Power BI, Fabric, Graph]
  MMC -->|HTTPS 443| MS

Ports MetaMiner listens on

Port Protocol Process Who connects Default How to change
MMS port TCP, HTTP and WebSocket, optional TLS MetaMiner Server, service metaminer MetaMiner Clients, browsers (/web/... dashboards), the MMA on the same machine 49714 MMA Preferences > Settings > General > Server Port, then Validate and OK
Web Apps port TCP, plain HTTP MetaMiner Web Apps, service MetaMinerWebApps Only the MMS on the same machine; page requests from other machines are refused 49717 -Dweb.apps.port in server\MetaMinerWebApps.ini; change only when Infolytik Support asks
Embedded MMDB port TCP, PostgreSQL Embedded PostgreSQL, service InfolytikPostgres The MMS, Web Apps and MetaQuery agent; your own SQL tools if you allow them 49614 See the TODO below
Database Console TCP, HTTP Database console started from the MMA A browser on the same machine (bound to 127.0.0.1) assigned at start not configurable

Open only the MMS port in the firewall. The Web Apps port never needs to be reachable from other machines.

TODO: document the supported procedure to change the embedded MMDB port

The port is stored as postgres_port in server\config\config.json and is edited in the MMA MetaMiner Database dialog. Confirm whether changing it also reconfigures the running PostgreSQL cluster.

Change the MMS port

  1. In the MetaMiner Administrator (MMA), open Preferences > Settings > General.
  2. Enter the new value in Server Port and click Validate. The MMA rejects ports above 65535 and ports already in use.
  3. Click OK. The MMS rebinds to the new port; connected clients are disconnected.
  4. Open the new port in the server's Windows firewall and in network firewalls.
  5. Give MMC users the new port, and update bookmarks to /web/pbiusage/.

The same port carries TLS when MMS SSL is on. See MetaMiner Server SSL.

Image of the MMA Settings dialog, General page, with the Server Port field, Validate button and Configure SSL button

../../images/help/mma-settings-general-port.png

Automatic server discovery (optional, UDP multicast)

The MMC Connection Manager can find MetaMiner Servers on the local network with UDP multicast to group 228.5.6.7. The server listens on UDP 49352, 54215, 58632 and 63759; the client listens for replies on UDP 49752, 55447, 59429 and 64186. If you block these, type the server name and port by hand; nothing else is affected.

Microsoft endpoints

All Microsoft calls use HTTPS on port 443, from the MMS machine (collection, validation in the MMA, backup and restore) and, for delegated features, from MMC machines. The Endpoint Set field of the Power BI environment selects the cloud.

Purpose Commercial US Government US Government High US Government Military
Sign-in (Microsoft Entra ID) https://login.microsoftonline.com https://login.microsoftonline.com https://login.microsoftonline.us https://login.microsoftonline.us
Power BI REST API https://api.powerbi.com https://api.powerbigov.us https://api.high.powerbigov.us https://api.mil.powerbigov.us
Fabric REST API https://api.fabric.microsoft.com https://api.fabric.microsoft.us https://api.fabric.high.microsoft.us https://api.fabric.mil.microsoft.us
Microsoft Graph https://graph.microsoft.com https://graph.microsoft.us https://graph.microsoft.us https://dod-graph.microsoft.us
Power BI portal links https://app.powerbi.com https://app.powerbigov.us https://app.high.powerbigov.us https://app.mil.powerbigov.us
Token audience (resource) https://analysis.windows.net/powerbi/api https://analysis.usgovcloudapi.net/powerbi/api https://high.analysis.usgovcloudapi.net/powerbi/api https://mil.analysis.usgovcloudapi.net/powerbi/api

The token audience is not a host MetaMiner connects to; it identifies the Power BI service when MetaMiner asks for a token.

Additional endpoint Used by Purpose
https://onelake.dfs.fabric.microsoft.com MMC Exporting Meta Query results to a Fabric lakehouse

Portal links in the dashboards

The Open links in the usage dashboards use web.apps.pbiusage.portal.base (default https://app.powerbi.com). In a government cloud, set it to the portal address of your cloud. See Server Properties.

See Sovereign Clouds for setup in government clouds.

Other outbound connections

Destination Port From Purpose
External PostgreSQL MMDB 5432 by default MMS, Web Apps, MMA MetaMiner Database when not embedded
SMTP server 25 or 587 (your server) MMS Notification and alert email
LDAP / Active Directory 389 by default MMS, MMA Importing users when LDAP is enabled

Ports the MetaMiner installer reserves

On install and upgrade, the installer reserves the configured MMS, Web Apps and embedded MMDB ports so that Windows does not assign them to other programs automatically. The reservation does not take a port away from a program that already uses it.