Port 6081Geneve

Geneve carries virtual network traffic between hosts over UDP, commonly as an overlay data-plane tunnel.

transport: udp
in transit: cleartext
assignment: official
risk: 5/10
lookups: 0

also known as Generic Network Virtualization Encapsulation

Technical Details

what runs on :6081

Geneve uses UDP destination port 6081 (RFC 8926). It has no connection handshake: each datagram carries an 8-byte base header, optional variable-length TLV options, and an encapsulated network packet. The header includes a 24-bit VNI to identify the virtual network; implementations commonly use varying UDP source ports to support underlay ECMP. Tunnel endpoints and their overlay configuration are established by a separate control plane. Geneve does not encrypt or authenticate the encapsulated traffic.

Security Information

exposure of :6081

risk score

5/ 10caution

worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.

network services averages 2.6 across 1,684 ports — this one sits 2.4 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

Do not expose Geneve to arbitrary internet hosts. An reachable tunnel endpoint may accept unauthenticated encapsulated packets, allowing traffic injection into an overlay or exposing the decapsulation implementation to malformed-packet attacks. Restrict UDP/6081 to trusted tunnel endpoints and use separate controls, such as underlay filtering and workload-level security, to protect the overlay.

Record

iana registry entry

port: :6081
service: Geneve
transport: UDP
encryption: cleartext
assignment: iana registered
risk: 5/10caution
category: Network Services Virtualization
usage: Geneve is an overlay encapsulation used between virtual switches and network endpoints in software-defined and cloud networks. Engineers commonly encounter it on hypervisors or other tunnel endpoints; the control plane that configures the overlay is separate.
lookups: 0rank 993
added: 2026-10-09
updated: 2026-10-09
references: IANA service name registry — port 6081
RFC 8926

Something wrong?

This record is maintained by the engineers who use port 6081. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-10-09.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

all 1,684 in network services →

the 8 most looked-up other ports in network services — 1,684 ports carry that label.

port	service	proto	category	risk	views
:9080	Groove RPC	TCPUDP	Web Services	caution	70.8k
:6543	Jetnet	UDP	Network Services	caution	65.3k
:5938	TeamViewer	TCPUDP	Remote Access	caution	65.0k
:8291	Winbox MikroTik Admin	TCP	Security	caution	62.9k
:3233	WhiskerControl Protocol	TCPUDP	Network Services	caution	61.9k
:3268	Microsoft Global Catalog (GC)	TCPUDP	Security	caution	54.6k
:135	Microsoft EPMAP	TCPUDP	Security	caution	51.9k
:3128	Tatsoft Default HTTP Proxy	TCP	Web Services	caution	46.8k

risk mix of the 8 listed

caution100%

0 of 8 encrypted

Port :6081Geneve

Technical Details

Security Information

Related Ports

Port 6081Geneve