I just want to know which ports to open in order to run JAMI. (which is the minimal number of port to be open)
Hello @blueotter 
By default, Jami uses those ports and protocols
| Port | Protocol |
|---|---|
| 4000 | UDP |
| 5060 | TCP |
| 5060 | UDP |
| 5061 | TCP |
| 5061 | UDP |
| 8888 | UDP |
| 16384-32766 | UDP |
| 49152-65534 | UDP |
Below is the same reply as above. But with details if you’re interested in those.
If your Jami is behind a router, if your router is configured appropriately, usually there is no need to open port(s). Neither on your router nor on your device. In other words, most of the time, Jami works without opening ports.
It is a significant security risk to open port(s). Including both open or redirect port(s). Before opening any port, I suggest trying all other available and appropriate options. Such as configuring your Jami appropriately.
If you really need to open port(s) and you know what you’re doing, optionally, using Jami configuration, instead of port 5060, you can set any other port to your liking.
Depending on which Jami feature(s) you use, other port(s) might need to be open. For example, but not limited to those ports and protocols:
| Port | Protocol | Description |
|---|---|---|
| 4000 | UDP | DHT (Distributed hash table) |
| 5060 | TCP | Default TCP. Randomly bound 5060 TCP and 5060 UDP. |
| 5060 | UDP | Default UDP (User Datagram Protocol). Randomly bound 5060 TCP and 5060 UDP. |
| 5061 | TCP | Secured connection. Using TLS 1.3. SIP Secure (SIPS). |
| 5061 | UDP | Secured connection. Using TLS 1.3. SIP Secure (SIPS). |
| 8888 | UDP | DHT (Distributed hash table) |
| 16384-32766 | UDP | Audio ports for TRP. Range of ports from 16384 to 32766. Those ports are use in case of failed ICE. Those ports are also used for the negotiation of SDP session. |
| 49152-65534 | UDP | Video ports for TRP. Range of ports from 16384 to 32766. Those ports are use in case of failed ICE. Those ports are also used for the negotiation of SDP session. |
If UDP is blocked, a dhtproxy can be used to use TCP instead. Note that if UDP is blocked, medias will not work. Because medias only supports UDP.
Related documentation and sources