[Documentation] TCP/UDP Port Requirements #2089

Open
opened 2025-11-20 06:12:34 -05:00 by saavagebueno · 1 comment
Owner

Originally created by @brad-charboneau on GitHub (Jul 21, 2025).

Documentation states
"The VM should be publicly accessible on TCP ports 80 and 443 and UDP ports: 3478, 49152-65535."

However, for a security focused tool, it makes NO reference as to what the ports are used for. Soo many ports being open and no info as to why leads to a lack of trust by many security professionals.

I suggest updating the docs to be upfront and open with your potential users as to why the ports are needed.

Originally created by @brad-charboneau on GitHub (Jul 21, 2025). Documentation states "The VM should be publicly accessible on TCP ports 80 and 443 and UDP ports: 3478, 49152-65535." However, for a security focused tool, it makes NO reference as to what the ports are used for. Soo many ports being open and no info as to why leads to a lack of trust by many security professionals. I suggest updating the docs to be upfront and open with your potential users as to why the ports are needed.
saavagebueno added the feature-request label 2025-11-20 06:12:34 -05:00
Author
Owner

@nazarewk commented on GitHub (Jul 22, 2025):

You're probably referring to the quick start guide, the full guide has more details

  • Open TCP ports 80, 443, 33073, 10000, 33080 (Dashboard HTTP & HTTPS, Management gRPC & HTTP APIs, Signal gRPC API, Relay respectively) on your server.
  • Coturn is used for relay using the STUN/TURN protocols. It requires a listening port, UDP 3478, and range of ports, UDP 49152-65535, for dynamic relay connections. These are set as defaults in setup file, but can be configured to your requirements.
@nazarewk commented on GitHub (Jul 22, 2025): You're probably referring to the [quick start guide](https://github.com/netbirdio/docs/blob/a7189313b467f8916af21ce7f7b1c5bdc6e49990/src/pages/selfhosted/selfhosted-quickstart.mdx#L28-L28), the full guide has [more details](https://github.com/netbirdio/docs/blob/a7189313b467f8916af21ce7f7b1c5bdc6e49990/src/pages/selfhosted/selfhosted-guide.mdx#L27-L28) > - Open TCP ports ```80, 443, 33073, 10000, 33080``` (Dashboard HTTP & HTTPS, Management gRPC & HTTP APIs, Signal gRPC API, Relay respectively) on your server. > - Coturn is used for relay using the STUN/TURN protocols. It requires a listening port, `UDP 3478`, and range of ports, `UDP 49152-65535`, for dynamic relay connections. These are set as defaults in setup file, but can be configured to your requirements.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#2089