Firewall

Several ports need to be opened in the firewall, this is a list of all ports that are needed by the components we describe in this document.

Those for nginx are necessary for Synapse to work, the ones for coturn and LiveKit only need to be opened if you run those servers.

Port(s) / range	IP version	Protocol	Application
80, 443	IPv4/IPv6	TCP	nginx, reverse proxy
8443	IPv4/IPv6	TCP	nginx, federation
3478	IPv4	UDP	LiveKit TURN
5349	IPv4	TCP	LiveKit TURN TLS
7881	IPv4/IPv6	TCP	LiveKit RTC
50000-60000	IPv4/IPv6	TCP/UDP	LiveKit RTC
3480	IPv4	TCP/UDP	coturn TURN
5351	IPv4	TCP/UDP	coturn TURN TLS
40000-49999	IPv4	TCP/UDP	coturn RTC

The ports necessary for TURN depend very much on the specific configuration of coturn and/or LiveKit.