### Tenant Broker
Source | Destination | Protocols | Ports | Description
Parallels Client | Tenant Broker - HALB | TCP, UDP TCP, UDP TCP, UDP | 80, 443 3389 20009 | Management and user session connections. Optional - Used for user session if RDP Load Balancing is enabled. Client Manager shadowing via Firewall (indirect network connection).
| Tenant Broker - RAS Secure Client Gateway (Normal and Forwarding modes) | TCP, UDP TCP, UDP TCP, UDP UDP | 80, 443 3389 20009 20000 | Management and user session connections. Optional - Used for user session if RDP Load Balancing is enabled. Client Manager shadowing via Firewall (indirect network connection). Note: Since RAS v16, Secure Client Gateways (in Forwarding mode) do not support client management. Secure Client Gateway lookup broadcast.
| Tenant - RDP session | TCP, UDP | 3389 | Used for user session connections in Direct Mode only. RDP connection is always encrypted.
Web browser (HTML5) | Tenant Broker - HALB | TCP | 443 | User access to Parallels RAS HTML5 Client (on Secure Client Gateway in Normal mode) through HALB.
| Tenant Broker - RAS Secure Client Gateway | TCP | 443 | User access to Parallels RAS HTML5 Client (on Secure Client Gateway in Normal mode).
Tenant Broker - RAS Secure Client Gateway in Forwarding Mode | Tenant Broker - RAS Secure Client Gateway in Normal Mode | TCP, UDP TCP, UDP | 80, 443 3389 | Management and user session connections. Optional - Used for user session if RDP Load Balancing is enabled.
| RAS Performance Monitor | TCP | 8086 | Agent (Telegraf service) sends collected performance data to InfluxDB.
Tenant Broker - RAS Secure Client Gateway in Normal Mode | Tenant - RAS RD Session Host Agent Tenant - RAS Guest Agent Tenant - RAS Remote PC Agent | TCP, UDP | 3389 | User session connections to Tenant's hosts.
| Tenant - RAS Publishing Agent | TCP | 20002 | Communications with RAS Secure Client Gateways and the RAS Console.
| Tenant Broker - RAS Publishing Agent | TCP | 20002 | Communications with Tenant Broker RAS Publishing Agent related to configuration synchronization and status reporting.
| RAS Performance Monitor | TCP | 8086 | Agent (Telegraf service) sends collected performance data to InfluxDB.
| Localhost | TCP | 20020 | Communication with RAS HTML5 Gateway web server (NodeJS).
Tenant Broker - RAS Console | RAS Reporting | TCP | 30008 | RAS Console is connected to primary RAS Publishing Agent which communicates with RAS Reporting (installed on the same host as SSRS). SSRS talks to SQL via TCP 1433 (or dynamic if 1433 is not established in the settings).
| Tenant Broker - HALB | TCP, UDP | 31006 | Used for configuration.
| Tenant Broker - Secure Client Gateways | TCP | 135, 445, 49179 | Remote install push/takeover of software.
| Tenant Broker - RAS Publishing Agent | TCP TCP | 20002, 20001 135, 445, 49179 | Communication with RAS Publishing Agent and redundancy. Remote install push/takeover of software.
| RAS Performance Monitor | TCP | 3000 | Performance Dashboard in the Monitoring category (Grafana connection).
Tenant Broker - HALB | Tenant Broker - HALB | VRRP | 112 | HALB to HALB communication used for automatic assignment of VIP to active HALB.
| Tenant Broker - RAS Secure Client Gateway in Forwarding mode | TCP, UDP TCP, UDP | 80, 443 3389 | Management and user session connections. Optional - Used for user session if RDP Load Balancing is enabled.
| Tenant Broker - RAS Secure Client Gateway in Normal mode | TCP, UDP TCP, UDP TCP, UDP | 80, 443 3389 20009 | Management and user session connections. Optional - Used for user session if RDP Load Balancing is enabled. Client Manager shadowing via Firewall (indirect network connection).
Tenant - RAS Publishing Agent | Tenant Broker - RAS Publishing Agent | TCP | 20003 | RAS Publishing Agent communicates with Tenant Broker to join Tenant Broker, synchronize configuration and statuses.
| RAS Performance Monitor | TCP | 8086 | Agent (Telegraf service) sends collected performance data to InfluxDB.