Port 443 / TCP/UDP
HTTPS / QUIC
Port 443 – HTTPS / QUIC Protocol Specification
Technical analysis, security advisories, vulnerability mitigation, and firewall syntax for TCP/UDP port 443 (HTTPS / QUIC).
Port Number
443
Transport Protocol
TCP/UDP
Port Range Type
Well-Known (0-1023)
Default Status
Public Safe
Service Description & Architectural Context
HTTP over TLS (and HTTP/3 QUIC over UDP) for encrypted web traffic.
IANA / RFC Designation:
Port 443 is assigned to HTTPS / QUIC under the Internet Assigned Numbers Authority (IANA) service name registry. In enterprise infrastructure and homelab setups, services listening on this port must follow the principle of least privilege.
Security Analysis & Attack Surface Assessment
Enforce TLS 1.2/1.3, configure modern cipher suites, and enable HSTS.
Hardening Recommendations:
- Do not expose port 443 to public WAN interfaces unless authenticated TLS or VPN wrapping is strictly enforced.
- Enforce rate-limiting using Fail2ban, CrowdSec, or cloud edge DDoS protection.
- Audit active listening sockets locally:
ss -tulpn | grep :443ornetstat -ano | findstr :443.
Firewall Rule Snippets for Port 443
UFW (Ubuntu / Debian Linux)
sudo ufw allow 443/tcp
iptables (Standard Linux Kernel)
sudo iptables -A INPUT -p tcp --dport 443 -j ACCEPT
Windows PowerShell (Defender Advanced Firewall)
New-NetFirewallRule -DisplayName "Allow Port 443" -Direction Inbound -LocalPort 443 -Protocol TCP -Action Allow