Port 9200 supports Elasticsearch HTTP API and wap-wsp (UDP reference coverage) across distinct transports. Review each protocol before writing firewall or monitoring policy.
Default HTTP API for Elasticsearch client and administrative requests.
Applications, ingestion pipelines and operators querying or managing Elasticsearch.
Client to server
Require authentication and TLS, restrict administrative APIs and never expose an unsecured cluster publicly.
wap-wsp (UDP reference coverage) is documented as a network service convention for port 9200 over UDP.
Use this reference entry when identifying or validating systems documented to use 9200/UDP.
Varies
Confirm the listening process and current vendor documentation before permitting traffic; a listed convention does not prove the active service or its security posture.