Network ports — searchable reference
A grouped, searchable list of the network ports developers and sysadmins actually run into — for configuring servers, opening firewall rules, or debugging a connection. Each entry shows the port number, protocol (TCP or UDP), the service, and a plain-English description.
How it works
Ports are organised into groups — web, email, remote access, databases, networking and messaging — and the search box filters the whole list by number, service name or keyword instantly. Port numbers fall into three IANA ranges:
- 0–1023 — well-known ports (HTTP 80, HTTPS 443, SSH 22)
- 1024–49151 — registered ports (databases, app servers)
- 49152–65535 — dynamic / ephemeral ports for temporary client connections
Common ports quick reference
| Port | Protocol | Service | Notes |
|---|---|---|---|
| 22 | TCP | SSH | Default; often moved to a high port to reduce scanning |
| 25 | TCP | SMTP (relay) | Server-to-server only; blocked by most ISPs for clients |
| 53 | TCP/UDP | DNS | TCP for zone transfers; UDP for queries |
| 80 | TCP | HTTP | Browsers redirect to HTTPS 443 when HSTS is set |
| 443 | TCP | HTTPS | TLS-wrapped HTTP; also used for QUIC/HTTP3 over UDP |
| 587 | TCP | SMTP (submission) | Client-to-server with STARTTLS; preferred over 465 |
| 993 | TCP | IMAP over TLS | Secure inbox retrieval; implicit TLS |
| 995 | TCP | POP3 over TLS | Secure mail download; implicit TLS |
| 3306 | TCP | MySQL | Also used by MariaDB |
| 5432 | TCP | PostgreSQL | Default; widely firewalled in cloud environments |
| 6379 | TCP | Redis | No auth by default; must be firewalled or bound to localhost |
| 27017 | TCP | MongoDB | Default; Atlas uses TLS on the same port |
| 3389 | TCP | RDP | Windows Remote Desktop; common brute-force target |
| 8080 | TCP | HTTP alt | Frequently used for dev servers and HTTP proxies |
| 8443 | TCP | HTTPS alt | HTTPS alternative for non-root dev servers |
TCP vs UDP: when it matters
TCP establishes a connection before sending data, guarantees ordered delivery, and retransmits lost packets. This makes it the right choice for web, email, databases, and remote shells — anywhere correctness and order matter. UDP sends packets without a handshake, with no delivery guarantee, which makes it faster and lower-overhead for services that can tolerate some loss: DNS queries, time synchronisation (NTP on 123), and media streaming. Some services such as DNS use both — UDP for normal queries and TCP for responses over 512 bytes or zone transfers.
Firewall rule tips
When opening firewall rules, the minimal-access principle is: allow only the specific port and protocol the service actually uses, and restrict the source IP range if possible. Redis (6379), PostgreSQL (5432), and MySQL (3306) should never be reachable from the public internet — bind them to localhost or a private VLAN and expose them only to application servers that need them.
Searching 5432 in the table jumps straight to the PostgreSQL row, while typing mail surfaces SMTP, IMAP, and POP3 entries together. Everything runs in your browser; nothing is uploaded.