Port 4789VXLAN

VXLAN carries Layer 2 Ethernet frames across an IP network inside UDP, commonly for data-center and cloud network overlays.

inNetwork Services Virtualization

transport: udp
in transit: cleartext
assignment: official
risk: 6/10
lookups: 0

also known as UDP 4789

Technical Details

what runs on :4789

VXLAN encapsulates an Ethernet frame in a VXLAN header and an outer UDP/IP packet; the standard destination port is UDP 4789 (older implementations may use UDP 8472). The header carries a 24-bit VXLAN Network Identifier (VNI), allowing many isolated overlay segments to share an underlay. Endpoints typically send to UDP destination port 4789, often using a varying UDP source port to support underlay load balancing. VXLAN does not provide encryption or peer authentication.

Security Information

exposure of :4789

risk score

6/ 10risk

treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.

network services averages 2.6 across 1,589 ports — this one sits 3.4 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

VXLAN is intended for a controlled network underlay, not unrestricted internet exposure. Because it has no built-in authentication or encryption, an exposed endpoint may accept or inject encapsulated traffic depending on its configuration, potentially enabling access to overlay networks; restrict the port to trusted peers and use IPsec or another protected underlay when needed.

Record

iana registry entry

port: :4789
service: VXLAN
transport: UDP
encryption: cleartext
assignment: iana registered
risk: 6/10risk
category: Network Services Virtualization
usage: Data-center and cloud networking platforms use VXLAN to extend Layer 2 networks across an IP underlay. Engineers commonly encounter it between hypervisors, switches, and other overlay-network endpoints.
lookups: 0rank 993
added: 2026-10-06
updated: 2026-10-06
references: IANA service name registry — port 4789
RFC 7348

Something wrong?

This record is maintained by the engineers who use port 4789. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-10-06.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

all 1,589 in network services →

the 8 most looked-up other ports in network services — 1,589 ports carry that label.

port	service	proto	category	risk	views
:9080	Groove RPC	TCPUDP	Web Services	caution	70.8k
:6543	Jetnet	UDP	Network Services	caution	65.3k
:5938	TeamViewer	TCPUDP	Remote Access	caution	65.0k
:8291	Winbox MikroTik Admin	TCP	Security	caution	62.9k
:3233	WhiskerControl Protocol	TCPUDP	Network Services	caution	61.9k
:3268	Microsoft Global Catalog (GC)	TCPUDP	Security	caution	54.6k
:135	Microsoft EPMAP	TCPUDP	Security	caution	51.9k
:3128	Tatsoft Default HTTP Proxy	TCP	Web Services	caution	46.8k

risk mix of the 8 listed

caution100%

0 of 8 encrypted

Port :4789VXLAN

Technical Details

Security Information

Related Ports

Port 4789VXLAN