When you browse secure websites, your browser connects using HTTP protected by TLS, often called HTTPS. Understanding which port does http over tls use helps network engineers, developers, and security teams configure firewalls, load balancers, and monitoring tools correctly.
Most secure web traffic relies on a well-known standard port that enables encrypted communication between clients and servers. This port is registered for HTTP over TLS and is recognized by operating systems, browsers, and networking equipment to establish trusted sessions.
| Protocol | Common Name | Assigned Port | Transport Layer | Typical Use |
|---|---|---|---|---|
| HTTP | Hypertext Transfer Protocol | 80 | TCP | Unencrypted web traffic |
| HTTP over TLS | HTTPS | 443 | TCP | Encrypted web traffic |
| HTTP over TLS | HTTPS | 8443 | TCP | Alternative deployment in private environments |
| HTTP/2 | HTTP/2 over TLS | 443 | TCP | Encrypted, multiplexed web traffic |
Standard Port for HTTP over TLS
Port 443 is the officially assigned TCP port for HTTP over TLS, as documented by the Internet Assigned Numbers Authority (IANA). This port is the default target for browsers when users access a URL that begins with https://, enabling encrypted exchanges without requiring explicit port specification.
Alternative and Internal Use Ports
While 443 is the standard, organizations sometimes deploy HTTP over TLS on alternative ports such as 8443 for internal applications, testing, or multi-tenant environments. Using non-standard ports can help avoid conflicts, provide separation of concerns, or support legacy systems that require custom configurations.
Client and Server Behavior
Modern clients, including web browsers and HTTP libraries, automatically attempt connections on port 443 for secure requests unless a different port is explicitly included in the URL. Servers listen on the designated port, present a TLS certificate, and complete a handshake before serving encrypted HTTP responses.
Operational Impact and Troubleshooting
Network rules, load balancers, and firewalls must allow traffic on the correct port to support HTTP over TLS without interruptions. Misconfigured endpoints, blocked ports, or mismatched certificates often produce connection failures that appear as timeout or reset errors in monitoring tools.
FAQ
Reader questions
Which port should I configure on my load balancer for HTTPS traffic?
Configure your load balancer to listen on port 443 for standard HTTPS traffic, and ensure backend health checks are aligned with this port unless you intentionally use a non-standard alternative.
Can I run HTTPS on a different port without breaking encryption?
Yes, you can run HTTPS on alternative ports such as 8443, but you must inform users by specifying the port in the URL and update any firewall, proxy, and monitoring rules accordingly.
Why do some internal tools use port 8443 instead of 443?
Internal tools often use port 8443 to avoid conflicts with public web services, to separate development or staging environments, or to run multiple TLS-enabled services on the same host without additional IP addresses.
Do HTTP/2 and QUIC change the recommended port for secure web traffic?
HTTP/2 still relies on TLS over TCP port 443 in most deployments, while QUIC uses UDP and typically listens on the same port 443, though implementations may vary based on network policies and platform support.