Ports to be opened for ONLYOFFICE Workspace Community
| Port | Service/ Protocol | Internal in/out | External in | External out | Description |
|---|---|---|---|---|---|
| 25 | SMTP | ✖ | ✖ | ✔ | The default port for the Simple Mail Transfer Protocol, used to transfer email messages from source to destination between mail servers and used by end users to send email to a mail system |
| 80 | HTTP | ✖ | ✔ | ✖ | The default port for the Hypertext Transfer Protocol, must be open for the client browser to be able to interact with the server if the server is set to operate via HTTP instead of HTTPS |
| 110 | POP3 | ✖ | ✖ | ✔ | The default port for the Post Office Protocol, which is one of the main protocols used to retrieve email messages from the server, downloading them to the client |
| 143 | IMAP STARTTLS | ✖ | ✖ | ✔ | The default port for the Internet Message Access Protocol using STARTTLS connection, which is used to retrieve email messages from the server without the need to download them to the client; if STARTTLS connection is not available an insecure connection will be used |
| 443 | HTTPS | ✖ | ✔* | ✖ | The default port for the Hypertext Transfer Protocol over SSL/TLS, must be open for the client browser to be able to interact with the server if the server is set to operate via HTTPS instead of HTTP |
| 587 | SMTP STARTTLS | ✖ | ✖ | ✔ | The default port for the Simple Mail Transfer Protocol Secure, used to transfer email messages from source to destination between the mail servers and used by end users to send email to a mail system via secure connection using TLS |
| 3306 | MySQL | ✔** | ✖ | ✖ | The default port used to connect to the MySQL relational database management system server |
| 5222 | Talk | ✔ | ✔ | ✖ | The default port for the Jabber instant messaging software client-to-server connection and communication, used by Talk on the portals |
| 5232 | Radicale | ✔ | ✖ | ✖ | The default port for the Radicale CalDav/CardDav calendar and address book synchronization server |
| 6379 | Redis | ✔** | ✖ | ✖ | The default port for the Redis distributed in-memory data structure store, used as a database, cache and message broker |
| 8081 | ApiSystem | ✔ | ✖ | ✖ | The default port used by ApiSystem |
| 8082 | Control Panel | ✔ | ✖ | ✖ | The default port used for the Control Panel |
| 8083 | DocService | ✔ | ✖ | ✖ | The default port used for the collaborative editing server proxy |
| 9300 | ElasticSearch | ✔ | ✖ | ✖ | The default communication port for the Elasticsearch used on the portals |
| 9800 | ASC.Thumbnails | ✔ | ✖ | ✖ | The default port for the ASC.Thumbnails service used to create bookmark thumbnails |
| 9865 | Jabber | ✔ | ✖ | ✖ | The default port used by the portal jabber service for it to be able to send notifications |
| 9866 | Search | ✔ | ✖ | ✖ | The default port for the search service used to search by portal or document contents (as a proxy to the Elasticsearch) |
| 9871 | Notify | ✔ | ✖ | ✖ | The default port used by the portal notification service |
| 9882 | Backup | ✔ | ✖ | ✖ | The default port used by the portal backup service |
| 9883 | Migration | ✔ | ✖ | ✖ | The default port used by the portal file storage migration service |
| 9899 | ASC.Socket.IO | ✔ | ✖ | ✖ | The default port used for the web application data exchange service |
| 9999 | ASC.UrlShortener | ✔ | ✖ | ✖ | The default port for the ASC.UrlShortener service used to shorten the document links when sharing them with the people outside the portal |
note
Note that you only need to open the above ports if you have the corresponding service installed and use it, as they are required for the correct work of the services listed in the table. If you disabled and do not plan to use certain services, consider closing the corresponding ports. If you changed the default port to another one, make sure you close the default port and open the one you set.
* if HTTPS is used instead of HTTP.
** if the service is installed on another network computer, an external port must be opened for outbound connections for ONLYOFFICE Workspace computer, and inbound connections for this port on the remote computer must be allowed.