# Firewall

Several ports need to be opened in the firewall, this is a list of all ports
that are needed by the components we describe in this document.

Those for nginx are necessary for Synapse to work, the ones for coturn and
LiveKit only need to be opened if you run those servers.


| Port(s) / range | IP version | Protocol | Application            |
| :-------------: | :--------: | :------: | :--------------------- |
| 80, 443         | IPv4/IPv6  | TCP      | nginx, reverse proxy   |
| 8443            | IPv4/IPv6  | TCP      | nginx, federation      |
| 3478            | IPv4       | UDP      | LiveKit TURN           |
| 5349            | IPv4       | TCP      | LiveKit TURN TLS       |
| 7881            | IPv4/IPv6  | TCP      | LiveKit RTC            |
| 50000-60000     | IPv4/IPv6  | TCP/UDP  | LiveKit RTC            |
| 3480            | IPv4       | TCP/UDP  | coturn TURN            |
| 5351            | IPv4       | TCP/UDP  | coturn TURN TLS        |
| 40000-49999     | IPv4       | TCP/UDP  | coturn RTC             |


The ports necessary for TURN depend very much on the specific configuration of
[coturn](../coturn#configuration) and/or [LiveKit](../element-call#livekit).

