What uses port 1080
A SOCKS proxy forwards arbitrary TCP connections (and UDP with SOCKS5), unlike an HTTP proxy that understands web requests. ssh -D 1080 user@server turns any SSH server into a local SOCKS proxy, which is a quick way to browse through a remote network. Browsers, curl (--socks5-hostname) and many tools support it.
Should port 1080 be open to the internet?
Keep private. Never expose this port to the internet. Keep it on localhost, a private network or behind a VPN or SSH tunnel.
- An open SOCKS proxy on the internet is quickly found and abused to relay spam and attacks. Bind it to 127.0.0.1 or require authentication.
Check what is listening on port 1080
sudo ss -ltnp 'sport = :1080'sudo lsof -nP -iTCP:1080 -sTCP:LISTENGet-NetTCPConnection -LocalPort 1080 -State Listen
netstat -ano | findstr :1080No output means nothing is listening. If a service should be, check that it is running and which address it binds to: 127.0.0.1 only accepts local connections, 0.0.0.0 or :: accepts them on every interface.
Fix “address already in use” on port 1080
Another process already holds the port. Find it with the commands above, then stop that service properly, or end the process:
sudo kill $(sudo lsof -t -iTCP:1080 -sTCP:LISTEN)Stop-Process -Id (Get-NetTCPConnection -LocalPort 1080 -State Listen).OwningProcessAllow port 1080 from trusted networks only
The examples allow 1080 only from 10.0.0.0/8; replace it with your own private network, office IP or VPN range.
sudo ufw allow from 10.0.0.0/8 to any port 1080 proto tcp
# Close it again:
sudo ufw delete allow from 10.0.0.0/8 to any port 1080 proto tcpsudo firewall-cmd --permanent --add-rich-rule='rule family="ipv4" source address="10.0.0.0/8" port port="1080" protocol="tcp" accept'
sudo firewall-cmd --reloadNew-NetFirewallRule -DisplayName "SOCKS proxy 1080/TCP" -Direction Inbound -Protocol TCP -LocalPort 1080 -Action Allow -RemoteAddress 10.0.0.0/8On AWS, Google Cloud and Azure, also allow the port in the security group or network firewall rules; host firewalls and cloud firewalls are separate.
Test port 1080 from another machine
nc -zv example.com 1080Test-NetConnection example.com -Port 1080Related ports
- Port 22 (SSH): used by SSH for secure remote logins, SFTP, SCP and Git over SSH.
- Port 3128 (Squid proxy): the default port of the Squid HTTP proxy.
- Port 8080 (HTTP alternate): the most common alternate HTTP port, used by proxies, app servers and dev tools.
More network services ports
53 (DNS) , 67 (DHCP server) , 68 (DHCP client) , 88 (Kerberos) , 123 (NTP) , 135 (Microsoft RPC) , 137 (NetBIOS Name Service) , 179 (BGP) . See all ports in the port lookup.
Sources
Spotted a mistake? Email hello@devtoolsmith.com and we’ll fix it.
Frequently asked questions
What is port 1080 used for?
Port 1080 is the conventional port for SOCKS proxies. A SOCKS proxy forwards arbitrary TCP connections (and UDP with SOCKS5), unlike an HTTP proxy that understands web requests. ssh -D 1080 user@server turns any SSH server into a local SOCKS proxy, which is a quick way to browse through a remote network. Browsers, curl (--socks5-hostname) and many tools support it.
Is it safe to open port 1080?
Never expose this port to the internet. Keep it on localhost, a private network or behind a VPN or SSH tunnel. Allow it only from the networks that need it, as in the firewall examples on this page.
How do I check if port 1080 is open?
On the server, list listening sockets with "sudo ss -ltnp 'sport = :1080'" on Linux or "sudo lsof -nP -i :1080" on macOS. From another machine, run "nc -zv host 1080" or, on Windows, "Test-NetConnection host -Port 1080". Connection refused means nothing is listening; a timeout means a firewall is dropping the traffic.