Port 910Kerberized Internet Negotiation of Keys (KINK)

KINK negotiates IPsec security associations using Kerberos authentication over TCP or UDP port 910.

transport: tcp · udp
in transit: encrypted
assignment: official
risk: 2/10
lookups: 0

also known as kink, Kerberized Internet Negotiation of Keys

Technical Details

what runs on :910

KINK is a binary key-management protocol that uses Kerberos for peer authentication and negotiates IPsec security associations. It exchanges structured request and response messages over TCP or UDP port 910, with Kerberos-protected authentication and keying material rather than the certificate- or pre-shared-key exchanges commonly associated with IKE. Kerberos itself normally uses port 88, while IKE uses UDP 500 and UDP 4500; those ports are related technologies, not alternate KINK ports.

Security Information

exposure of :910

risk score

2/ 10safe

routine exposure. this port is rarely the way in on its own — keep it patched and logged and move on.

security averages 3.6 across 254 ports — this one sits 1.6 below.

in transit

encrypted

payloads are protected on the wire

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

KINK should generally be restricted to hosts and networks that require Kerberos-based IPsec negotiation rather than exposed broadly to the Internet. Kerberos authentication limits unauthorized negotiation, but an exposed listener can still be probed or targeted for denial of service, and its security depends on correct realm configuration, service principals, and Kerberos cryptography.

Record

iana registry entry

port: :910
service: Kerberized Internet Negotiation of Keys (KINK)
transport: TCPUDP
encryption: tls / encrypted
assignment: iana registered
risk: 2/10safe
category: Security Network Services
usage: KINK is an alternative to IKE for establishing and managing IPsec security associations in Kerberos-based environments. Engineers are most likely to encounter it on systems integrating IPsec with an existing Kerberos realm; it is rarely exposed on the public Internet.
lookups: 0rank 994
added: 2026-08-31
updated: 2026-08-31
references: IANA service name registry — port 910
RFC 4430

Something wrong?

This record is maintained by the engineers who use port 910. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-08-31.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

all 254 in security →

the 8 most looked-up other ports in security — 254 ports carry that label.

port	service	proto	category	risk	views
:8881	Atlasz Secure Server	TCP	Web Services	caution	67.6k
:443	HTTPS	TCPtls	Web Services	caution	65.9k
:8291	Winbox MikroTik Admin	TCP	Security	caution	62.9k
:3268	Microsoft Global Catalog (GC)	TCPUDP	Security	caution	54.6k
:135	Microsoft EPMAP	TCPUDP	Security	caution	51.9k
:3128	Squid Proxy HTTP	TCP	Web Services	caution	45.8k
:8080	HTTP Alternate	TCPtls	Web Services	caution	44.9k
:7000	Vuze HTTPS Tracker	TCPtls	Security	caution	28.9k

risk mix of the 8 listed

caution100%

3 of 8 encrypted

Port :910Kerberized Internet Negotiation of Keys (KINK)

Technical Details

Security Information

Related Ports

Port 910Kerberized Internet Negotiation of Keys (KINK)