Tanzu Platform for Cloud Foundry 6.0

NATS network communications

Last Updated March 13, 2025

The following tables show NATS internal network communication paths with other VMware Tanzu Application Service for VMs (TAS for VMs) components.

For more information about how Cloud Foundry integrates NATS, see TAS for VMs Routing Architecture.

Publish communications

The following table lists network communications that are published to NATS:

Source VMDestination VMPortTransport Layer ProtocolApp Layer ProtocolSecurity and Authentication
cloud_controller (Route Registrar)nats4222-4225TCPNATSBasic authentication
loggregator_trafficcontroller (Route Registrar)nats4222-4225TCPNATSBasic authentication
mysql_proxy (Route Registrar)*nats4222-4225TCPNATSBasic authentication
nfs_server (Route Registrar)nats4222-4225TCPNATSBasic authentication
uaa (Route Registrar)nats4222-4225TCPNATSBasic authentication
diego_cell (local Route Emitter)nats4222-4225TCPNATSBasic authentication

*Applies only to deployments where internal MySQL is selected as the database.

Applies only to deployments where the internal NFS server is selected for file storage.

Subscribe communications

The following table lists network communications that are subscribed to NATS:

Source VMDestination VMPortTransport Layer ProtocolApp Layer ProtocolSecurity and Authentication
routernats4222-4225TCPNATSBasic authentication

BOSH DNS communications

By default, TAS for VMs components and app containers look up services using the BOSH DNS service discovery mechanism. To support this lookup, BOSH Director co-locates a BOSH DNS server on every deployed VM. For more information, see BOSH DNS network communications.