What Port 988 Is
According to the official IANA registry, port 988 is unassigned.1 It sits in the well-known ports range (0-1023), the territory traditionally reserved for system services and protocols that need privileged access. But "unassigned" doesn't mean empty.
In practice, port 988 is claimed by two completely different systems that decided they needed it—and just started using it.
The Unofficial Tenants
Mac OS X NetInfo (RPC Services)
Port 988 falls within the range Apple designated for RPC-based services on Mac OS X, particularly NetInfo.2 NetInfo was Apple's directory service system used in Mac OS X Server and older Mac OS X versions to store system configuration—user accounts, network settings, everything the system needed to know about itself.
NetInfo is legacy now. Modern macOS uses Open Directory and other mechanisms. But systems still running older Mac OS X Server installations use port 988 for RPC communication, and those systems will keep using it until they're finally retired.
Lustre Parallel Filesystem
Port 988 is the default port for Lustre's socklnd network driver.3 Lustre is a parallel distributed filesystem used in high-performance computing—the kind of infrastructure that handles petabytes of data across thousands of nodes in supercomputing centers and research institutions.
The socklnd (socket LND, or Lustre Network Driver) uses TCP port 988 by default to establish connections between Lustre clients and servers. It's configurable via the accept_port parameter, but 988 is the default, which means thousands of Lustre installations worldwide expect port 988 to be open.4
For Lustre deployments, blocking port 988 at the firewall breaks the filesystem. Security groups must allow inbound traffic on 988 (and ports 1018-1023) for Lustre nodes to communicate.5
What "Unassigned" Actually Means
The well-known ports range (0-1023) is managed by IANA. Assignments are supposed to be official, documented, standardized. Port 22 is SSH. Port 80 is HTTP. Port 443 is HTTPS.
Port 988 never got that treatment. It's unassigned in the official registry, which means:
- No RFC defines what port 988 is for
- No standards body blessed its use
- IANA could theoretically assign it tomorrow to something completely different
But in practice, two unrelated communities decided port 988 worked for them and claimed it. Apple used it for NetInfo. The Lustre developers chose it as their default acceptor port. Neither asked permission. They just built systems that depend on it.
This is how the Internet actually works. The official registry is a map, but the territory doesn't always wait for mapmakers.
Why Unassigned Ports Matter
The unassigned ports in the well-known range represent possibility. They're addresses waiting for services that might need them. But they also represent the gap between official standards and operational reality.
Port 988 shows what happens in that gap: systems get built, defaults get chosen, infrastructure gets deployed. Once thousands of Lustre installations expect port 988 to work, "unassigned" stops meaning "available." It means "claimed by convention, not by RFC."
The lesson: unassigned doesn't mean unused. It means no one official is home—but someone might already be living there.
How to Check What's Using Port 988
On Linux or macOS:
On Windows:
If you see something listening, check the process ID to identify what claimed it. Could be Lustre. Could be legacy Mac RPC services. Could be something else entirely.
The Strange Beauty of Ghost Ports
Port 988 is a ghost port—officially empty but practically occupied. It carries petabytes of scientific data through Lustre filesystems. It keeps legacy Mac networks running in server rooms that haven't been updated in a decade.
The Internet is full of these contradictions. Spaces that are officially nothing but functionally everything. Port 988 is one of them.
このページは役に立ちましたか？