Port 6636MPLS-in-UDP with DTLS

UDP port 6636 carries MPLS packets in tunnels protected by Datagram Transport Layer Security (DTLS).

transport: udp
in transit: encrypted
assignment: official
risk: 2/10
lookups: 0

also known as mpls-udp-dtls, MPLS-in-UDP DTLS

Technical Details

what runs on :6636

The IANA assignment describes MPLS packets encapsulated in UDP tunnels with DTLS. A DTLS handshake negotiates protection over UDP, after which the tunnel carries MPLS data in protected datagrams; the exact handshake and authentication options depend on the implementation and configuration. The related MPLS-in-UDP assignment is UDP port 6635, which does not itself indicate DTLS protection.

Security Information

exposure of :6636

risk score

2/ 10safe

routine exposure. this port is rarely the way in on its own — keep it patched and logged and move on.

network services averages 2.6 across 1,735 ports — this one sits 0.6 below.

in transit

encrypted

payloads are protected on the wire

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

DTLS protects tunnel traffic when correctly configured, but this is a network-plane endpoint, not a service intended for arbitrary internet clients. Restrict access to known tunnel peers and configure peer authentication; exposed endpoints may otherwise face probing, denial-of-service attempts, or unwanted tunnel traffic. Encryption does not make an exposed endpoint safe to accept packets from untrusted sources.

Record

iana registry entry

port: :6636
service: MPLS-in-UDP with DTLS
transport: UDP
encryption: tls / encrypted
assignment: iana registered
risk: 2/10safe
category: Network Services
usage: This is an infrastructure tunnel endpoint for carrying MPLS traffic over UDP with DTLS protection, rather than a user-facing service. Engineers are most likely to encounter it on routers or other network equipment configured for this tunnelling; it is not commonly seen open in internet-wide scans.
lookups: 0rank 993
added: 2026-10-11
updated: 2026-10-11
references: IANA service name registry — port 6636
RFC 7510

Something wrong?

This record is maintained by the engineers who use port 6636. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-10-11.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

all 1,735 in network services →

the 8 most looked-up other ports in network services — 1,735 ports carry that label.

port	service	proto	category	risk	views
:9080	Groove RPC	TCPUDP	Web Services	caution	70.8k
:6543	Jetnet	UDP	Network Services	caution	65.3k
:5938	TeamViewer	TCPUDP	Remote Access	caution	65.0k
:8291	Winbox MikroTik Admin	TCP	Security	caution	62.9k
:3233	WhiskerControl Protocol	TCPUDP	Network Services	caution	61.9k
:3268	Microsoft Global Catalog (GC)	TCPUDP	Security	caution	54.6k
:135	Microsoft EPMAP	TCPUDP	Security	caution	51.9k
:3128	Tatsoft Default HTTP Proxy	TCP	Web Services	caution	46.8k

risk mix of the 8 listed

caution100%

0 of 8 encrypted

Port :6636MPLS-in-UDP with DTLS

Technical Details

Security Information

Related Ports

Port 6636MPLS-in-UDP with DTLS