Port 2408Cloudflare Railgun

Cloudflare Railgun's encrypted TCP channel between an origin-side listener and Cloudflare's edge.

transport: tcp
in transit: encrypted
assignment: official
risk: 3/10
lookups: 0

also known as railgun-webaccl

Technical Details

what runs on :2408

Railgun uses TCP port 2408 for a proprietary, encrypted channel between the origin-side Railgun listener and Cloudflare's Railgun service. The listener maintains a session with Cloudflare and exchanges optimized web-resource requests and responses; the public wire format and detailed handshake/framing are proprietary rather than an HTTP protocol exposed directly to clients. It is normally the listener's dedicated service port and is unrelated to the origin's usual HTTP and HTTPS ports, 80 and 443.

Security Information

exposure of :2408

risk score

3/ 10caution

worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.

web services averages 3.3 across 177 ports — this one sits 0.3 below.

in transit

encrypted

payloads are protected on the wire

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp

every listening transport is another surface to filter at the edge

security overview

The listener should not be broadly reachable from the Internet: restrict TCP/2408 to Cloudflare's published source ranges and use the deployment's authentication and key-management controls. Although the channel is encrypted and intended for authenticated Cloudflare peers, an unnecessarily exposed or outdated listener increases attack surface and can permit unauthorized service interaction or resource consumption.

Record

iana registry entry

port: :2408
service: Cloudflare Railgun
transport: TCP
encryption: tls / encrypted
assignment: iana registered
risk: 3/10caution
category: Web Services Cloud
usage: This port is used by the Cloudflare Railgun listener installed near an origin server to maintain a connection with Cloudflare for web-content acceleration. Engineers typically encounter it on origin infrastructure participating in a Cloudflare Railgun deployment, rather than on ordinary web servers.
lookups: 0rank 993
added: 2026-09-22
updated: 2026-09-22
references: IANA service name registry — port 2408

Something wrong?

This record is maintained by the engineers who use port 2408. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-09-22.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

all 177 in web services →

the 8 most looked-up other ports in web services — 177 ports carry that label.

port	service	proto	category	risk	views
:8888	Sun Answerbook & Alt HTTP	TCP	Web Services	caution	123.9k
:8000	Intel Remote Desktop / Alternate HTTP Port	TCP	Web Services	safe	84.3k
:8888	NewsEDGE	TCPUDP	Web Services	caution	83.3k
:8888	HTTP Alternative Port	TCP	Web Services	caution	76.5k
:8888	GNUmp3d Streaming HTTP	TCP	Web Services	caution	76.3k
:9080	Groove RPC	TCPUDP	Web Services	caution	70.8k
:8881	Atlasz Secure Server	TCP	Web Services	caution	67.6k
:80	HTTP	TCPUDP	Web Services	caution	67.3k

risk mix of the 8 listed

safe13%
caution88%

0 of 8 encrypted

Port :2408Cloudflare Railgun

Technical Details

Security Information

Related Ports

Port 2408Cloudflare Railgun