Skip to main content
Work with your network administrators to allow the domains and ports listed below on your organization’s network, and open firewall exceptions on the local development PC. You must establish a LAN connection between the dev PC and the target device before you can develop against it.
When migrating from the XDK to the GDK, update any folder-specific restriction or firewall rules to the new install path at C:\Program Files (x86)\Microsoft GDK.

Domains for XBOX services

Port for XBOX services

TCP 443.

Ports for the development PC

2303, 3076, 4016, 11442, 11443, 49152, 49157, 49160.

Ports for multiplayer and Teredo

  • UDP 500 (inbound and outbound).
  • UDP 3544 (outbound).
  • UDP 4500 (inbound and outbound).
To run tests between devices that aren’t on the same network, turn off all inbound-packet filtering.

Server-to-server XBOX network configuration

If your title makes server-to-server XBOX network (XBOX Live) calls, allow-list these CIDR blocks for all XBOX sandboxes, including RETAIL, CERT, *.1, and *.99:
  • 134.170.28.0/23
  • 191.232.80.128/25
  • 191.232.82.128/25
  • 191.234.78.0/23
  • 131.253.28.0/23
  • 134.170.176.0/22
  • 157.56.70.0/23
  • 65.55.42.0/23
  • 131.253.22.0/23
  • 191.234.240.0/21

Ports for GDK on XBOX One family consoles

Open the ports above for both TCP and UDP. Most UI tools only need TCP, but XBOX Game Streaming requires UDP.

Submission Validator tool

  • Port: 443.
  • Domain: https://*.xboxlive.com.

Wake on LAN for XBOX dev kits

Required by xbreboot and parts of XBOX Manager. Wake-on-LAN magic packets go to:
  • UDP 7.
  • UDP 9.

IPv6-only networks

Most XBOX services, including sign-in and authentication, currently expose only IPv4 endpoints. Development and testing require IPv4 connectivity, and IPv6 is optional. XBOX doesn’t support pure IPv6 networks. Console socket APIs and dev tools support IPv6.
Last modified on August 4, 2026