☁️Hosting·4 min read

Firewall & Port Management

Open, close, and manage firewall ports on your hosting instance.

Default Open Ports

When your instance is provisioned, these ports are opened by default:

22 (SSH) — Remote terminal access
80 (HTTP) — Web traffic
443 (HTTPS) — Secure web traffic

Opening Additional Ports via NexusHost

1.Go to Dashboard → Hosting → [Your Instance]
2.Find the "Ports" section
3.Enter the port number and click "Open Port"
4.The change takes effect within seconds

Common ports you might need:

3000 — Node.js / Next.js dev server
3306 — MySQL database
5432 — PostgreSQL database
6379 — Redis
8080 — Alternative HTTP / Tomcat
8443 — Alternative HTTPS
2083 — cPanel
2087 — WHM
8443 — Plesk
27017 — MongoDB

Managing Ports via SSH (UFW)

If you have Ubuntu:

sudo ufw allow 3000/tcp — Open port 3000

sudo ufw deny 3306/tcp — Close port 3306

sudo ufw status — List all rules

sudo ufw delete allow 3000/tcp — Remove rule

Security Best Practices

Never expose database ports (3306, 5432, 6379) to the internet unless absolutely necessary
Use IP whitelisting for sensitive ports
Always keep SSH (22) restricted to your IPs if possible
Use VPN for accessing admin panels in production
Close unused ports promptly
Regularly audit open ports with: sudo netstat -tlnp
Knowledge Base — NexusHost | NexusHost