# Need specific port for KMS and TURN server as these many port cannot be allowed at enterprise firewall

**URL:** <https://openvidu.discourse.group/t/need-specific-port-for-kms-and-turn-server-as-these-many-port-cannot-be-allowed-at-enterprise-firewall/3901>\
**Category:** Issues with deployment\
**Tags:** v2\
**Created:** [April 19, 2022, 10:20am UTC](https://openvidu.discourse.group/t/need-specific-port-for-kms-and-turn-server-as-these-many-port-cannot-be-allowed-at-enterprise-firewall/3901 "2022-04-19T10:20:50Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![sunil\_openvidu](https://avatars.discourse-cdn.com/v4/letter/s/b9bd4f/32.png) [@sunil\_openvidu](https://openvidu.discourse.group/u/sunil_openvidu)\
**Post date:** [April 19, 2022, 10:20am UTC](https://openvidu.discourse.group/t/need-specific-port-for-kms-and-turn-server-as-these-many-port-cannot-be-allowed-at-enterprise-firewall/3901/1 "2022-04-19T10:20:50Z")

</div>

Need specific port for KMS and TURN server as these many port cannot be allowed at enterprise firewall.

**Port configuration in the server**

- **Open these ports** (in section [Close ports to avoid external attacks](https://docs.openvidu.io/en/stable/deployment/ce/on-premises/#close-ports-to-avoid-external-attacks) you have an UFW sample to configure a firewall)
  - **22 TCP** : to connect using SSH to admin OpenVidu.
  - **80 TCP** : if you select Let’s Encrypt to generate an SSL certificate this port is used by the generation process.
  - **443 TCP** : OpenVidu server and application are published by default in standard https port.
  - **3478 TCP+UDP** : used by TURN server to resolve clients IPs.
  - **40000 - 57000 TCP+UDP** : used by Kurento Media Server to establish media connections.
  - **57001 - 65535 TCP+UDP** : used by TURN server to establish relayed media connections.

---

<div class="post-metadata">

**Author:** ![sunil\_openvidu](https://avatars.discourse-cdn.com/v4/letter/s/b9bd4f/32.png) [@sunil\_openvidu](https://openvidu.discourse.group/u/sunil_openvidu)\
**Post date:** [April 21, 2022, 5:34am UTC](https://openvidu.discourse.group/t/need-specific-port-for-kms-and-turn-server-as-these-many-port-cannot-be-allowed-at-enterprise-firewall/3901/2 "2022-04-21T05:34:02Z")

</div>

Hi Team

Please update on above query.

---

<div class="post-metadata">

**Author:** ![micael.gallego](https://yyz2.discourse-cdn.com/free1/user_avatar/openvidu.discourse.group/micael.gallego/32/2_2.png) [@micael.gallego](https://openvidu.discourse.group/u/micael.gallego)\
**Post date:** [April 21, 2022, 9:49am UTC](https://openvidu.discourse.group/t/need-specific-port-for-kms-and-turn-server-as-these-many-port-cannot-be-allowed-at-enterprise-firewall/3901/3 "2022-04-21T09:49:30Z")

</div>

If you do not open required ports specified in documentation, the videoconference will require more computational resources and will have more latency.

Test opening, at least, the following ports:

- **80 TCP** : if you select Let’s Encrypt to generate an SSL certificate this port is used by the generation process.
- **443 TCP** : OpenVidu server and application are published by default in standard https port.
- **3478 TCP+UDP** : used by TURN server to resolve clients IPs.

Regards