3. Exposing Ports
By default, ICE Mobile or ICE Desktop will not be able to connect to services running inside the container. This will result in ICE clients being unable to connect to a Rallypoint agent or a web browser connecting to the tactical configuration wizard. Specific network services exposed by the agent must be configured for use outside of the Docker container. Use the -p switch to forward ports from the Docker container to the host machines.
For example, use the following command to enable a browser running on your host machine to connect to the agent's tactical wizard.
docker run -p 8999:8999 ...
The switch -p 8999:8999 tells Docker to forward port 8999 (first value) inside the container to port 8999 (second value) on the host. In this case, ICE Agent is running a web server on port 8999; this command allows services outside the container to access it on port 8999.
ICE Agent hosts server sockets and 'listens' on the following network ports which, depending on use, should be forwarded to the host system:
Port | Purpose |
7443 | SSL socket connections made by ICE Mobile and ICE Desktop clients to the Rallypoint. Not used when not running a Rallypoint. |
8443 | Web socket connections made by ICE Desktop for Web clients to the Rallypoint. Not used when not running a Rallypoint. |
27443 | The default health check port used by the Rallypoint and patch server. Not common but may be used to allow third party components (like a load balancer or container orchestration tool) to determine the status of the container. |
8999 | The tactical wizard configuration web application, used only with the tactical command. |