Ports and endpoints

Endpoint URLs (from the host)

Neither endpoint uses a resource path — open62541 servers serve at the bare URL. Compare with uanetstandard-test-suite which uses /UA/TestServer on every endpoint.

Endpoint URLs (container-to-container)

For another container on the same compose network:

The container-internal port is always 4840. The host mapping (24840, 24841, 24842) is just for outside access.

Ports

Mapped on the host:

Container names

Set explicitly in docker-compose.yml:

Useful when you need to docker exec or docker logs against a specific container.

Image registry

Tagged with both :vX.Y.Z (immutable) and :latest (the most recent stable).

Port-allocation rule

This suite reserves 24840-24849 for its own services. New services pick from 24843 onward, avoiding the 4840-4849 range that uanetstandard-test-suite owns, plus its 4851 (SKS) and 14850 (PubSub).

Combined contract across both suites:

A client that runs both suites simultaneously sees 13 OPC UA servers, no port conflicts.

Application URIs

Both inherit open62541's hard-coded default. Different from uanetstandard-test-suite (which uses urn:opcua:testserver:nodes). If your client trusts by ApplicationUri, you need separate entries for each suite.

Note: the OPCUA_APPLICATION_URI env var on open62541-all-security only changes the server cert's subjectAltName URI: — it does not change the ApplicationUri the running server reports, because that value is baked into the open62541 build. See Environment variables.

NodeId conventions

For open62541-nm, since the address space starts empty:

When AddNodes creates new nodes, use ns=1;s=<your-key> as the convention. The server doesn't enforce this — ns=2..N also work — but ns=1 is canonical.

For open62541-all-security, the address space is open62541's default — almost empty, with the standard server nodes only.

Health probe

The action uses nc -z to probe each port. For your own health checks:

nc -z localhost 24840 && echo "open62541-nm: OK"
nc -z localhost 24841 && echo "open62541-all-security: OK"
nc -z localhost 24842 && echo "open62541-historizing: OK"

OPC UA also has a GetEndpoints service that's lighter than opening a full session — useful for HTTP-style probes:

opcua-cli get-endpoints opc.tcp://localhost:24840

Should return at least one EndpointDescription (the None/None endpoint for open62541-nm, 11 for all-security — one per (policy, mode) combination; see Policies and modes · Endpoint count).

Where to read next

• Environment variables — the config surface.
• Troubleshooting — when things don't match this table.