Port 1194 — OpenVPN (UDP)
What is Port 1194?
Domyślny port OpenVPN dla bezpiecznego tunelowania.
This is a registered port (1024–49151) often assigned to vendor or application services like OpenVPN. · IANA registered (no formal RFC); uses TLS (RFC 8446)
When do you need Port 1194 open?
Open if you are hosting an OpenVPN server for remote access or site-to-site VPN tunnels. Not required if your VPN uses WireGuard (port 51820) or IKEv2/IPsec instead.
Common uses and software
- OpenVPN Community Edition
- OpenVPN Access Server
- pfSense
- OPNsense
- DD-WRT
- Tunnelblick (macOS client)
Security
Use certificate-based authentication rather than username/passwords alone. Keep OpenVPN server and clients updated — check changelogs for CVEs. Use AES-256-GCM cipher and TLS 1.2+ for the control channel. Restrict access to port 1194 to known client IPs where possible. Consider enabling TLS auth HMAC on tls-auth to reject unauthorised handshakes.
Is Port 1194 safe?
An open port increases your attack surface. Safety depends on how OpenVPN is configured.
Low risk, but confirm that OpenVPN on this port is intentionally running and required by your application before leaving it open.
Test connectivity for Port 1194 on any host.
How to Open Port 1194
To allow incoming connections to Port 1194 (OpenVPN) from outside your network, configure your firewall and add a port forwarding rule on your router pointing to your device's local IP address.
Open Windows Defender Firewall → Advanced Settings → Inbound Rules → New Rule → Port → UDP → Specific local ports: 1194 → Allow the connection → Name and save the rule.
netsh advfirewall firewall add rule name="Open Port 1194" dir=in action=allow protocol=udp localport=1194sudo ufw allow 1194/udpsudo iptables -A INPUT -p udp --dport 1194 -j ACCEPTLog into your router (192.168.1.1 or 192.168.0.1) → Port Forwarding → Add a new rule: Protocol UDP, External port 1194, Internal IP: your device's local IP, Internal port 1194 → Save.
How to close Port 1194
If you do not need OpenVPN, block this port in your firewall or router.
To block port 1194 on Windows, run the following command in PowerShell or Command Prompt (as Administrator):
netsh advfirewall firewall add rule name="Block Port 1194" dir=in action=block protocol=udp localport=1194sudo ufw deny 1194/udpsudo iptables -A INPUT -p udp --dport 1194 -j DROPRemove or disable any port forwarding rule for Port 1194.
Frequently Asked Questions
What is Port 1194 used for?▾
Port 1194 is the default UDP port for OpenVPN. It is used by servers and applications that need to accept incoming connections for this service. Whether you need it open depends on whether you are actively running a OpenVPN server — if not, it should remain closed to reduce your attack surface.
Is Port 1194 safe to keep open?▾
An open Port 1194 increases your attack surface. If you are not actively running OpenVPN, close this port in your firewall and remove any port forwarding rules. If OpenVPN must be accessible, restrict access to known IP ranges, keep the service software updated with security patches, and use strong authentication.