# Ports

When kuma-cp starts up, by default it listens on a few ports:

  • 5677: the SDS server being used for propagating mTLS certificates across the data-planes.
  • 5678: the xDS gRPC server implementation that the data-planes will use to retrieve their configuration.
  • 5680: the HTTP server that returns the health status of the control-plane.
  • 5681: the HTTP API server that is being used by kumactl, and that you can also use to retrieve Kuma's policies and - when running in universal - that you can use to apply new policies.
  • 5682: the HTTP server that provides the Envoy bootstrap configuration when the data-plane starts up.