Port 4790VXLAN-GPE
UDP encapsulation for VXLAN overlays that can carry Ethernet, IP, or other payloads identified by a next-protocol field.
- transport
- udp
- in transit
- cleartext
- assignment
- official
- risk
- 5/10
- lookups
- 0
single transport
payload readable on path
registered with iana
caution
rank 993 of 5,290 · top 19%
also known as VXLAN Generic Protocol Extension, UDP/4790
Technical Details
what runs on :4790VXLAN-GPE uses UDP destination port 4790 and an 8-byte encapsulation header containing a 24-bit VNI and a next-protocol field to identify the encapsulated payload, such as Ethernet, IPv4, IPv6, or Network Service Header (NSH). It is a datagram tunnel protocol with no connection handshake; the UDP source port is commonly chosen to provide entropy for underlay load balancing. Ordinary VXLAN generally uses UDP port 4789 and does not use the GPE next-protocol extension.
Security Information
exposure of :4790risk score
5/ 10caution
worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.
network services averages 2.6 across 1,589 ports — this one sits 2.4 above.
in transit
cleartext
credentials and payloads are readable by anyone on path
assignment
official
registered with iana for this service — scanners fingerprint it by number
reachable over
udp
udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite
security overview
VXLAN-GPE does not provide encryption or peer authentication by default. A reachable endpoint may accept spoofed tunnel packets, potentially exposing or injecting traffic into an overlay, so restrict UDP/4790 to trusted tunnel endpoints and apply filtering and security controls to inner traffic. It is not generally appropriate to expose this port to the public internet.
Related Ports
the 8 most looked-up other ports in network services — 1,589 ports carry that label.
| port | service | risk | |||
|---|---|---|---|---|---|
| :9080 | Groove RPC | TCPUDP | Web Services | caution | 70.8k |
| :6543 | Jetnet | UDP | Network Services | caution | 65.3k |
| :5938 | TeamViewer | TCPUDP | Remote Access | caution | 65.0k |
| :8291 | Winbox MikroTik Admin | TCP | Security | caution | 62.9k |
| :3233 | WhiskerControl Protocol | TCPUDP | Network Services | caution | 61.9k |
| :3268 | Microsoft Global Catalog (GC) | TCPUDP | Security | caution | 54.6k |
| :135 | Microsoft EPMAP | TCPUDP | Security | caution | 51.9k |
| :3128 | Tatsoft Default HTTP Proxy | TCP | Web Services | caution | 46.8k |
risk mix of the 8 listed
- caution100%
0 of 8 encrypted