Proxy and tunneling ports
5 proxy and tunneling ports: what each one does, its protocol, and whether it is secure by default.
SubnetKit lists 5 proxy & tunneling ports, using TCP and TCP/UDP. 4 of 5 are formally registered with IANA rather than just a widely followed convention.
1 of the 5 proxy & tunneling ports is encrypted by default; the rest send data in clear text unless wrapped in TLS, SSH, or a VPN.
Click any port below for its full page: what it does, its protocol, and whether it is safe to expose.
| Port | Service | Protocol | What it does |
|---|---|---|---|
| 1080 | SOCKS | TCP | SOCKS proxy |
| 3128 | Squid | TCP | Squid caching proxy |
| 3478 | STUN/TURN | TCP/UDP | STUN/TURN (NAT traversal for WebRTC) |
| 4444 | krb524 | TCP | Kerberos 5 to 4 ticket translator |
| 5349 | TURN-TLS | TCP | STUN/TURN over TLS |
Frequently asked questions
Which ports are in the Proxy & tunneling category?
port 1080 (SOCKS), port 3128 (Squid), port 3478 (STUN/TURN), port 4444 (krb524) and port 5349 (TURN-TLS).
How many proxy and tunneling ports does SubnetKit list?
5, covering TCP and TCP/UDP. 4 of them are formally registered with IANA.
Are proxy and tunneling ports secure by default?
1 out of 5 are encrypted by default. Check each port's page for its specific encryption status.
Which proxy and tunneling port has the lowest number?
Port 1080 (SOCKS). Port 1080 is the default port for a SOCKS proxy, which relays arbitrary TCP, and in SOCKS5 also UDP, traffic on behalf of a client without understanding the application protocol inside it. SSH's built-in dynamic port forwarding (ssh -D) creates a SOCKS proxy on a port like this one.