Why does OpenVPN prefer UDP on port 1194 over TCP?

UDP eliminates redundant retransmission timers and packet queuing overhead, avoiding the severe performance degradation known as TCP-over-TCP meltdown.

Can OpenVPN be configured on port 443 instead of 1194?

Yes. Many administrators configure OpenVPN on TCP port 443 to bypass restrictive corporate firewalls and hotel networks that block port 1194.

How do I check if my OpenVPN port is open?

If configured for TCP, you can check reachability with our Open Port Checker. For UDP, initiate a client connection and inspect client logs.

Home/Open Port Checker/Port 1194

Port 995 Port 1433

Registered Port Reference

Port 1194: OpenVPN (TCP/UDP)

Open-source virtual private network (VPN) protocol providing encrypted site-to-site and client-to-gateway tunnels.

Port Number

1194

Transport

TCP/UDP

Security Risk

Low

Standard / RFC

Community Standard

Test Port 1194 Reachability Live

Verify whether Port 1194 is open, closed, or filtered on your server or public IP address.

Loading port checker...

Service Architecture & Function

Port 1194 is the IANA-assigned default port for OpenVPN. While OpenVPN can run over TCP or UDP, UDP is heavily favored because it avoids the 'TCP meltdown' problem (where nested TCP retransmissions cascade and collapse network throughput).

Security Profile & Hardening

Ensure OpenVPN uses TLS 1.3 or TLS 1.2 with strong HMAC authentication (tls-crypt or tls-auth) to prevent port scanning and denial-of-service against the VPN listener.

Example Firewall Commands:

# UFW (Ubuntu/Debian)

sudo ufw allow 1194/udp

# iptables (Direct Kernel)

iptables -A INPUT -p udp --dport 1194 -j ACCEPT