This article details the ports used by Control4, so a system administrator can open the ports for the Control4 system to be contacted remotely.
❌ Do not port forward inbound traffic through your router or firewall.
💡 All communication is initiated by the Control4 Controller and sent outbound to Control4 Servers. There is no need to alter your firewall to allow for inbound traffic.
If you need more information around IP addresses and domains being addressed, check our article Which Network Ports & Hosts Does a Control4 System Use?
Required IP Address to Allow Traffic From
Internal IP address of your main Control4 Controller (Director)
Required Outbound Ports
| Application | Port Number | Protocol |
| RA Proxy | 25021 | TCP |
| SIP Server 1 | 5080 | TCP & UDP |
| SIP Server 2 | 5081 | TCP |
| Turn Balancer | 3478 | TCP |
| Turn Server 1 | 5000 | TCP |
| Turn Server 2 | 5001 | TCP |
| Turn Server 3 | 20000 - 60000 | TCP |
| Director Media Streaming 1 | 5070 | TCP |
| Direction Media Streaming 2 | 30000 - 50000 | UDP |
| C4 API 1 | 8443 | TCP |
| C4 API 2 | 9443 | TCP |
| Director 443 | 443 | TCP |
| Director 80 | 80 | TCP |
| Director Data Upload | 22 | TCP |
| DNS | 53 | TCP & UDP |
💡
Ports for DNS are needed to resolve FQDN hostnames. An internal DNS server can be used instead if it can properly resolve the hostnames of the Control4 Servers.