Port Numbers Reference

Well-known TCP and UDP ports and their services — searchable.

A searchable reference of well-known network ports — 22 SSH, 80 HTTP, 443 HTTPS, 3306 MySQL, 5432 PostgreSQL and more — grouped by purpose with a plain-English description. Runs entirely in your browser, nothing is uploaded. It runs free in your browser on Gera Tools, with nothing uploaded.

Last updated Source: Gera Tools

What is the difference between TCP and UDP ports?

TCP is connection-oriented and guarantees ordered, reliable delivery, which suits web pages, email and databases. UDP is connectionless and faster but without delivery guarantees, which suits DNS lookups, time sync and streaming. Some services such as DNS use both.

Network ports — searchable reference

A grouped, searchable list of the network ports developers and sysadmins actually run into — for configuring servers, opening firewall rules, or debugging a connection. Each entry shows the port number, protocol (TCP or UDP), the service, and a plain-English description.

How it works

Ports are organised into groups — web, email, remote access, databases, networking and messaging — and the search box filters the whole list by number, service name or keyword instantly. Port numbers fall into three IANA ranges:

  • 0–1023 — well-known ports (HTTP 80, HTTPS 443, SSH 22)
  • 1024–49151 — registered ports (databases, app servers)
  • 49152–65535 — dynamic / ephemeral ports for temporary client connections

Common ports quick reference

PortProtocolServiceNotes
22TCPSSHDefault; often moved to a high port to reduce scanning
25TCPSMTP (relay)Server-to-server only; blocked by most ISPs for clients
53TCP/UDPDNSTCP for zone transfers; UDP for queries
80TCPHTTPBrowsers redirect to HTTPS 443 when HSTS is set
443TCPHTTPSTLS-wrapped HTTP; also used for QUIC/HTTP3 over UDP
587TCPSMTP (submission)Client-to-server with STARTTLS; preferred over 465
993TCPIMAP over TLSSecure inbox retrieval; implicit TLS
995TCPPOP3 over TLSSecure mail download; implicit TLS
3306TCPMySQLAlso used by MariaDB
5432TCPPostgreSQLDefault; widely firewalled in cloud environments
6379TCPRedisNo auth by default; must be firewalled or bound to localhost
27017TCPMongoDBDefault; Atlas uses TLS on the same port
3389TCPRDPWindows Remote Desktop; common brute-force target
8080TCPHTTP altFrequently used for dev servers and HTTP proxies
8443TCPHTTPS altHTTPS alternative for non-root dev servers

TCP vs UDP: when it matters

TCP establishes a connection before sending data, guarantees ordered delivery, and retransmits lost packets. This makes it the right choice for web, email, databases, and remote shells — anywhere correctness and order matter. UDP sends packets without a handshake, with no delivery guarantee, which makes it faster and lower-overhead for services that can tolerate some loss: DNS queries, time synchronisation (NTP on 123), and media streaming. Some services such as DNS use both — UDP for normal queries and TCP for responses over 512 bytes or zone transfers.

Firewall rule tips

When opening firewall rules, the minimal-access principle is: allow only the specific port and protocol the service actually uses, and restrict the source IP range if possible. Redis (6379), PostgreSQL (5432), and MySQL (3306) should never be reachable from the public internet — bind them to localhost or a private VLAN and expose them only to application servers that need them.

Searching 5432 in the table jumps straight to the PostgreSQL row, while typing mail surfaces SMTP, IMAP, and POP3 entries together. Everything runs in your browser; nothing is uploaded.