Proxy & tunneling ports
5 proxy & tunneling ports: what each one does, its protocol, and whether it is secure by default.
SubnetKit lists 5 proxy & tunneling ports, using TCP and TCP/UDP. 4 of 5 are formally registered with IANA rather than just a widely followed convention.
1 of the 5 proxy & tunneling ports is encrypted by default; the rest send data in clear text unless wrapped in TLS, SSH, or a VPN.
Click any port below for its full page: what it does, its protocol, and whether it is safe to expose.
| Port | Service | Protocol | What it does |
|---|---|---|---|
| 1080 | SOCKS | TCP | SOCKS proxy |
| 3128 | Squid | TCP | Squid caching proxy |
| 3478 | STUN/TURN | TCP/UDP | STUN/TURN (NAT traversal for WebRTC) |
| 4444 | krb524 | TCP | Kerberos 5 to 4 ticket translator |
| 5349 | TURN-TLS | TCP | STUN/TURN over TLS |
Frequently asked questions
Which ports are in the Proxy & tunneling category?
port 1080 (SOCKS), port 3128 (Squid), port 3478 (STUN/TURN), port 4444 (krb524) and port 5349 (TURN-TLS).
How many proxy & tunneling ports does SubnetKit list?
5, covering TCP and TCP/UDP. 4 of them are formally registered with IANA.
Are proxy & tunneling ports secure by default?
1 out of 5 are encrypted by default. Check each port's page for its specific encryption status.
Which proxy & tunneling port has the lowest number?
Port 1080 (SOCKS). Port 1080 is the default port for a SOCKS proxy, which relays arbitrary TCP, and in SOCKS5 also UDP, traffic on behalf of a client without understanding the application protocol inside it. SSH's built-in dynamic port forwarding (ssh -D) creates a SOCKS proxy on a port like this one.