HTTPfy

Port 5671 (AMQP over TLS)

AMQP with TLS (RabbitMQ, Azure Service Bus, Azure Event Hubs).

Registered (user) port, 1024-49151 TCP Message queues Expose only to trusted sources

What port 5671 is used for

AMQP with TLS (RabbitMQ, Azure Service Bus, Azure Event Hubs).

Security: should port 5671 be open?

Expose only to trusted sources. Use when clients connect from outside the network; still require credentials.

IANA assignment

Service nameProtoDescriptionAssigneeReference
amqps TCP amqp protocol over TLS/SSL Ted Ross 2 -
amqps UDP amqp protocol over TLS/SSL Ted Ross 2 -

Registry dates for this port: registered 2008-03-26.

Check what is listening on port 5671

Linux: is anything listening on TCP 5671?
sudo ss -tlnp 'sport = :5671'
Linux / macOS: which process owns the port
sudo lsof -nP -i :5671
Older Linux / BSD (net-tools)
sudo netstat -tlnp | grep ':5671 '
Windows (Command Prompt)
netstat -ano | findstr :5671
Windows (PowerShell)
Get-NetTCPConnection -LocalPort 5671 -State Listen | Select LocalAddress,OwningProcess

Test it from outside

From another machine
nc -vz -w 5 HOST 5671
From Windows
Test-NetConnection HOST -Port 5671

Allow only trusted sources on port 5671 in the firewall

Replace 203.0.113.10 with the address or network you trust. With ufw, make sure the default incoming policy is deny.

ufw (one trusted source)
sudo ufw allow from 203.0.113.10 to any port 5671 proto tcp
iptables
sudo iptables -A INPUT -p tcp --dport 5671 -s 203.0.113.10 -j ACCEPT
sudo iptables -A INPUT -p tcp --dport 5671 -j DROP
nftables
sudo nft add rule inet filter input ip saddr 203.0.113.10 tcp dport 5671 accept
sudo nft add rule inet filter input tcp dport 5671 drop
Windows Firewall
New-NetFirewallRule -DisplayName 'TCP 5671 trusted' -Direction Inbound -Protocol TCP -LocalPort 5671 -RemoteAddress 203.0.113.10 -Action Allow

Related ports

All port numbers · Open port checker
Assignment data: IANA port number registry (public domain), retrieved 2026-11-10.