What is port 1194 used for?
OpenVPN’s default port. It can also run over TCP.
Should port 1194 be open?
Usually open to the internet. This port is meant to be reachable publicly on servers that offer the service. Safe to expose when certificates and strong authentication are set up.
See what is listening on port 1194
# Linux
sudo ss -ulnp | grep ':1194 '
# macOS
sudo lsof -nP -i UDP:1194
# Windows (PowerShell)
Get-NetUDPEndpoint -LocalPort 1194
Open or block port 1194 in a firewall
# Ubuntu / Debian (ufw)
sudo ufw allow 1194/udp
sudo ufw deny 1194/udp
# Windows (PowerShell, as administrator)
New-NetFirewallRule -DisplayName "Port 1194" -Direction Inbound -Protocol UDP -LocalPort 1194 -Action Allow
On cloud servers, also open the port in the provider’s security group or network firewall. At home, a service behind a router needs a port-forwarding rule to the device’s local IP.