Port 848Group Domain of Interpretation (GDOI)

GDOI distributes group cryptographic keys and security policy, commonly for IP multicast and other group communications.

inSecurity Network Services

transport: tcp · udp
in transit: encrypted
assignment: official
risk: 4/10
lookups: 0

also known as gdoi, Group Domain of Interpretation

Technical Details

what runs on :848

GDOI (RFC 3547) is an ISAKMP-derived group key-management protocol. A group member performs a registration exchange with the group controller or key server, authenticates, and receives the group policy plus key-encryption and traffic-encryption material; subsequent rekey messages distribute updated keys to members. GDOI messages use structured ISAKMP payload framing and are normally carried over UDP port 848; the registry also lists TCP 848. It is related conceptually to IKE and ISAKMP, but is intended for group rather than point-to-point key management.

Security Information

exposure of :848

risk score

4/ 10caution

worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.

security averages 3.6 across 254 ports — this one sits 0.4 above.

in transit

encrypted

payloads are protected on the wire

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

GDOI exchanges are designed to provide authenticated and protected key-management traffic, but the service is highly sensitive: compromise of a group controller or unauthorized membership can expose keys for the protected group. Restrict port 848 to known group members and controllers rather than exposing it broadly to the Internet, and monitor unexpected registration or rekey activity.

Record

iana registry entry

port: :848
service: Group Domain of Interpretation (GDOI)
transport: TCPUDP
encryption: tls / encrypted
assignment: iana registered
risk: 4/10caution
category: Security Network Services
usage: GDOI is a group key-management protocol used by group members to register with a group controller or key server and obtain traffic-encryption keys and policy. Engineers typically encounter it in multicast security, secure group communications, and systems using a centralized group key server; deployments normally use UDP 848.
lookups: 0rank 994
added: 2026-08-31
updated: 2026-08-31
references: IANA service name registry — port 848
RFC 3547

Something wrong?

This record is maintained by the engineers who use port 848. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-08-31.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

all 254 in security →

the 8 most looked-up other ports in security — 254 ports carry that label.

port	service	proto	category	risk	views
:8881	Atlasz Secure Server	TCP	Web Services	caution	67.6k
:443	HTTPS	TCPtls	Web Services	caution	65.9k
:8291	Winbox MikroTik Admin	TCP	Security	caution	62.9k
:3268	Microsoft Global Catalog (GC)	TCPUDP	Security	caution	54.6k
:135	Microsoft EPMAP	TCPUDP	Security	caution	51.9k
:3128	Squid Proxy HTTP	TCP	Web Services	caution	45.8k
:8080	HTTP Alternate	TCPtls	Web Services	caution	44.9k
:7000	Vuze HTTPS Tracker	TCPtls	Security	caution	28.9k

risk mix of the 8 listed

caution100%

3 of 8 encrypted

Port :848Group Domain of Interpretation (GDOI)

Technical Details

Security Information

Related Ports

Port 848Group Domain of Interpretation (GDOI)