Ports 5222, 5269, 5280, 5347

When i take a look at

docker ps

I see:

CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
df59a8f72c6f jitsi/jigasi “/init” 2 days ago Up 2 days 0.0.0.0:20000-20050->20000-20050/udp docker-jitsi-meet_jigasi_1
1130c51df2a7 jitsi/jicofo “/init” 2 days ago Up 2 days docker-jitsi-meet_jicofo_1
bece5d7fa223 jitsi/web “/init” 5 days ago Up 2 days 0.0.0.0:8000->80/tcp, 0.0.0.0:8443->443/tcp docker-jitsi-meet_web_1
70768d00b837 jitsi/jvb “/init” 6 days ago Up 2 days 0.0.0.0:4443->4443/tcp, 0.0.0.0:10000->10000/udp docker-jitsi-meet_jvb_1
13ffac0568f5 jitsi/prosody “/init” 6 days ago Up 2 days 5222/tcp, 5269/tcp, 5280/tcp, 5347/tcp docker-jitsi-meet_prosody_1
6d185928d79a jitsi/jibri “/init” 8 days ago Up 2 days docker-jitsi-meet_jibri_1

What are port 5222/tcp, 5269/tcp, 5280/tcp and 5347/tcp doing?
Do i need to open them in the firewall?

Thank you.

I’ve did some search on the forum and i found this post: [jitsi-dev] Inventory of server-sided TCP/IP ports used by the stack

In that post they mention the ports that i’ve opened, but also:
UDP 5000-6000
TCP 7443

Is there a list of all ports that Jitsi Meet uses? And do they all need to be open in the firewall?

Thanks again.

Hey Syan,

There’s a lot conflicting information about ports. This is partly because the situation has changed over time, and because the details differ between environments (docker vs debian, prosoddy vs openfire, etc).

5222/tcp is for XMPP client connections. You need to accessble by jitsi-videobridge and jicofo. Web clients don’t use this (see below)
5269/tcp is the XMPP server. It doesn’t need to be open.
5280/tcp is XMPP BOSH. It doesn’t need to be accessible because clients using BOSH (such as web clients) connect through the proxy on 443/tcp
5347/tcp is the XMPP component port. It needs to be accessible only by jicofo, not publically.

I hope this helps,
Boris