Skip to main content

What firewall ports should I open to use NetBird?

Incoming ports​

NetBird's agent doesn't require any incoming port to be open; It negotiates the connection with the support of the signal and relay services.

Outgoing ports​

NetBird usually won't need open ports, but sometimes you or your IT team needs to secure and verify all outgoing traffic, and that may affect how NetBird clients connect to the control layer and negotiate the peer-to-peer connections.

Below is the list of NetBird hosted endpoints and ports they listen to:

  • Management service:
    • Endpoint: api.wiretrustee.com
    • Port: TCP/443
  • Signal service:
    • Endpoint: signal2.wiretrustee.com
    • Port: TCP/443
  • Relay (TURN) service:
    • Endpoint: turn.netbird.io
    • Port range: UDP/5555-65535