Port 4064ZeroC Ice Glacier2 SSL Router

An SSL/TLS endpoint for the ZeroC Ice firewall-traversal router, which relays client requests through network firewalls.

inSecurity Network Services

transport: tcp · udp
in transit: encrypted
assignment: official
risk: 2/10
lookups: 0

also known as ice-srouter, Ice firewall traversal SSL

Technical Details

what runs on :4064

The assignment identifies the SSL version of the Ice firewall-traversal service. In typical ZeroC Ice configurations, Glacier2 accepts client connections over TCP with TLS, then uses Ice's protocol to manage sessions and relay requests to backend services; the router can also support controlled callbacks through the established client connection. Port 4064 is commonly used for this SSL endpoint, alongside a non-SSL router endpoint often on 4063. Although IANA lists both TCP and UDP, the usual Glacier2 router session is connection-oriented and uses TCP/TLS; UDP is not the typical router transport.

Security Information

exposure of :4064

risk score

2/ 10safe

routine exposure. this port is rarely the way in on its own — keep it patched and logged and move on.

security averages 3.1 across 366 ports — this one sits 1.1 below.

in transit

encrypted

payloads are protected on the wire

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

Expose this only when clients need to reach Ice services through the router. TLS protects the connection in transit, but the router remains an externally reachable application service: require appropriate authentication, keep the Ice/Glacier2 software patched, and restrict access where practical. Its uncommon deployment means an open port may be unexpected, but the registry assignment alone does not make an exposed instance harmless.

Record

iana registry entry

port: :4064
service: ZeroC Ice Glacier2 SSL Router
transport: TCPUDP
encryption: tls / encrypted
assignment: iana registered
risk: 2/10safe
category: Security Network Services
usage: In ZeroC Ice deployments, this is the registered SSL endpoint for Ice's firewall-traversal router, commonly implemented by Glacier2. Clients connect outward to the router, which mediates access to backend Ice services; it is uncommon outside deployments using ZeroC Ice.
lookups: 0rank 993
added: 2026-10-03
updated: 2026-10-03
references: IANA service name registry — port 4064

Something wrong?

This record is maintained by the engineers who use port 4064. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-10-03.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

all 366 in security →

the 8 most looked-up other ports in security — 366 ports carry that label.

port	service	proto	category	risk	views
:8881	Atlasz Secure Server	TCP	Web Services	caution	67.6k
:443	HTTPS	TCPtls	Web Services	caution	65.9k
:8291	Winbox MikroTik Admin	TCP	Security	caution	62.9k
:3268	Microsoft Global Catalog (GC)	TCPUDP	Security	caution	54.6k
:135	Microsoft EPMAP	TCPUDP	Security	caution	51.9k
:3128	Squid Proxy HTTP	TCP	Web Services	caution	45.8k
:8080	HTTP Alternate	TCP	Web Services	caution	44.9k
:7000	Vuze HTTPS Tracker	TCPtls	Security	caution	28.9k

risk mix of the 8 listed

caution100%

2 of 8 encrypted

Port :4064ZeroC Ice Glacier2 SSL Router

Technical Details

Security Information

Related Ports

Port 4064ZeroC Ice Glacier2 SSL Router