Common TCP & UDP Ports

Well-known port numbers for network services.

Well-known ports (0-1023) identify the standard services that run on networked hosts. This table covers the ports you will actually use when configuring firewalls, ACLs, and services: SSH, DNS, HTTP and HTTPS, mail, NTP, DHCP, SNMP, and the database and remote-access ports.

Port numbers are 16 bits wide, so each transport protocol has 65,535 ports. Ports 0 to 1023 are the well-known ports assigned to standard services, 1024 to 49151 are registered ports used by vendors and applications, and 49152 to 65535 are the dynamic or ephemeral ports a client picks for its side of a connection. When you write a firewall rule or an ACL, the well-known ports are the ones you will match most often, and the table also covers common alternates such as HTTP on 8080 so a service that is not on its default port does not surprise you.

Use it as a quick lookup when writing firewall rules.

PortProtoServiceDescription
20TCPFTP DataFile Transfer Protocol (data channel)
21TCPFTP ControlFile Transfer Protocol (control)
22TCPSSHSecure Shell
23TCPTelnetUnencrypted remote access (avoid)
25TCPSMTPMail transfer between servers
53UDP/TCPDNSDomain Name System
67/68UDPDHCPDynamic Host Configuration Protocol
80TCPHTTPHypertext Transfer Protocol
110TCPPOP3Post Office Protocol v3
123UDPNTPNetwork Time Protocol
143TCPIMAPInternet Message Access Protocol
161/162UDPSNMPSimple Network Management Protocol
389TCPLDAPLightweight Directory Access Protocol
443TCPHTTPSHTTP over TLS/SSL
514UDPSyslogSystem logging
587TCPSMTPMail submission (authenticated)
636TCPLDAPSLDAP over TLS/SSL
993TCPIMAPSIMAP over TLS/SSL
995TCPPOP3SPOP3 over TLS/SSL
1194UDPOpenVPNOpenVPN default port
1812/1813UDPRADIUSAuthentication & accounting
3389TCPRDPRemote Desktop Protocol
5432TCPPostgreSQLPostgreSQL database
8080TCPHTTP AltHTTP alternative / proxy
8443TCPHTTPS AltHTTPS alternative

Frequently Asked Questions

What is port 8080 used for?
Port 8080 is a common alternate HTTP port. Application servers, proxies, and development servers use it when they cannot bind to port 80, either because another service already holds 80 or because the process cannot run with the privileges that low ports require. Seeing 8080 in a URL usually means the service is not on its default port.
How many TCP and UDP ports are there?
65,535 per protocol. Port numbers are 16 bits wide, so TCP and UDP each have the same range from 1 to 65,535, with port 0 reserved. The two protocols number their ports independently, so TCP port 53 and UDP port 53 are separate listeners.
What is the difference between TCP and UDP ports?
The number means the same thing, but the transport differs. TCP ports carry connection-oriented sessions with a handshake, ordering, and retransmission, while UDP ports carry connectionless datagrams with no delivery guarantee. Services such as DNS and DHCP listen on both.
Which ports are well known?
Ports 0 to 1023 are the well-known ports that IANA assigns to standard services, such as 22 for SSH, 25 for SMTP, 53 for DNS, 80 for HTTP, 443 for HTTPS, and 3389 for RDP. The registered range 1024 to 49151 holds vendor and application ports, and 49152 to 65535 is for ephemeral client ports.
What is port 80 used for?
Port 80 carries unencrypted HTTP web traffic. HTTPS uses port 443, and any service that serves web pages over TLS should be reached on 443 so the encryption is never downgraded.
What port does DNS use?
DNS uses UDP port 53 for most queries and TCP port 53 for zone transfers and for responses too large to fit in a single UDP packet. Blocking port 53 outbound at the firewall is a common way to force clients onto your own resolvers.
What is an ephemeral port?
An ephemeral port is the temporary source port a client picks from the dynamic range (49152 to 65535) for the duration of a connection. It lets many clients share one destination port on a server, and the port is released when the connection closes.

Read More

Guides that go deeper on the same topic.

More Reference

Explore the other reference in the toolkit.

RFC 1918 Private IP Ranges
The RFC 1918 private IP ranges are 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16. See each private range, its class, host count, and where to use it.
Fiber Connector Types
Reference guide to fiber optic connector types: LC, SC, ST, FC, MPO/MTP, and E2000 with polish, return loss, and typical use.
Ethernet Standards (IEEE 802.3)
Reference table of IEEE 802.3 Ethernet standards: 1000BASE-T, 10GBASE-T, 10GBASE-SR/LR, 25G, 40G, 100G, and 400G with media, cable types, and distances.
RFC References for Network Engineers
Quick reference list of the essential networking RFCs every infrastructure engineer should know, from RFC 1918 to BGP, DHCP, DNS, and NTP.
Reserved & Special-Use IP Addresses
Reference table of special-use IPv4 ranges: loopback, link-local (APIPA), CGNAT, TEST-NET documentation ranges, multicast, and broadcast.
TIA-606 Cable Color Codes & Labeling Standard
TIA-606 labeling standard and cable color codes for structured cabling: blue for horizontal cabling, orange for demarcation, purple for common equipment, identifier formats, and admin classes.
Transceiver Form Factors
Reference table of optical transceiver form factors: SFP, SFP+, SFP28, QSFP+, QSFP28, QSFP-DD, CFP2, XFP, and CXP with speeds and distances.
WiFi Standards (IEEE 802.11)
Reference table of WiFi standards and generations: 802.11b through 802.11be (Wi-Fi 1 to Wi-Fi 7) with maximum speeds, frequencies, and release years.
Power Connectors & Receptacles
Reference table of data center power connectors: NEMA 5-15P, L6-30P, IEC C13/C14, C19/C20, IEC 60309, Schuko, and BS 1363 with amp and voltage ratings.
Device Naming Conventions
Standard network device naming convention: use a <site>-<role>-<number> pattern. See examples for switches, firewalls, servers, and stack members.
Interface & Port Naming
How to standardize network interface names across vendors: Cisco IOS, Juniper Junos, and NX-OS/AOS-CX conventions with examples.
VLAN & Subnet Naming
Best practices for VLAN naming: descriptive names like SRV-PROD and GUEST-WIFI paired with documented VLAN IDs and subnets.
VLAN ID Ranges & Reserved IDs
Reference table of VLAN ID ranges: the standard range 2-1001, the extended range 1006-4094, reserved IDs (0, 1002-1005, 4095), and the default VLAN 1.

Stop reaching for a spreadsheet

Obelinf keeps every subnet, device, circuit, and rack in one live source of truth, with audit logs and a topology view. Free for personal use.