Dear Prosody developers,

The following patch is proposed, please consider it for inclusion:

# HG changeset patch
# User Vladimir Nikishkin <[email protected]>
# Date 1628944069 -28800
#      Sat Aug 14 20:27:49 2021 +0800
# Node ID b34c05dcf12914481e442c3c3cbdc72f962a9888
# Parent  47b1717f88bfb4f2b815df632ce16df232359b64
Clarify port usage in doc/ports.md.

1. Add a note describing port usage.

diff -r 47b1717f88bf -r b34c05dcf129 doc/ports.md
--- a/doc/ports.md      Tue Aug 03 14:02:14 2021 +0200
+++ b/doc/ports.md      Sat Aug 14 20:27:49 2021 +0800
@@ -13,15 +13,24 @@

 Here is an overview of default ports and the respective services:

-    port service
-  ------ ------------------------------------
-    5000 [File transfer proxy](/doc/modules/mod_proxy65)
-    5222 [Client connections](/doc/modules/mod_c2s)
-    5269 [Server-to-server connections](/doc/modules/mod_s2s)
-    5280 [HTTP](/doc/http)
-    5281 [HTTPS](/doc/http)
-    5347 [External components](/doc/components)
-    5582 [Telnet console](/doc/console)
+    port     service
+  ---------- ------------------------------------
+    5000/tcp [File transfer proxy](/doc/modules/mod_proxy65)
+    5222/tcp [Client connections](/doc/modules/mod_c2s)
+    5269/tcp [Server-to-server connections](/doc/modules/mod_s2s)
+    5280/tcp [HTTP](/doc/http)
+    5281/tcp [HTTPS](/doc/http)
+    5347/tcp [External components](/doc/components)
+    5582/tcp [Telnet console](/doc/console)
+
+As a rule of thumb, Prosody uses almost exclusively TCP for all its network
+communication. Rare exceptions (such as cooperating external
services, e.g. TURN)
+mention the protocol they use in their own documentation.
+
+Of the ports above, the https port uses standard TLS, the http port
is unencrypted,
+and "Client connections" and "Server-to-server connections" ports use
plain TCP by
+default, but can upgrade a connection using the STARTTLS option. "External
+components" and "Telnet console" only ever listen on a local interface.

 # Default interfaces {#default_interfaces}


-- 
Yours sincerely, Vladimir Nikishkin
(Sent from GMail web interface.)

-- 
You received this message because you are subscribed to the Google Groups 
"prosody-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/prosody-dev/CA%2BA2iZYs1pR%3D%2BL2-4PzRbWu1ZmpxyuJsD6nYwmEDAsZ1xgT6VQ%40mail.gmail.com.
# HG changeset patch
# User Vladimir Nikishkin <[email protected]>
# Date 1628944069 -28800
#      Sat Aug 14 20:27:49 2021 +0800
# Node ID b34c05dcf12914481e442c3c3cbdc72f962a9888
# Parent  47b1717f88bfb4f2b815df632ce16df232359b64
Clarify port usage in doc/ports.md.

1. Add a note describing port usage.

diff -r 47b1717f88bf -r b34c05dcf129 doc/ports.md
--- a/doc/ports.md	Tue Aug 03 14:02:14 2021 +0200
+++ b/doc/ports.md	Sat Aug 14 20:27:49 2021 +0800
@@ -13,15 +13,24 @@
 
 Here is an overview of default ports and the respective services:
 
-    port service
-  ------ ------------------------------------
-    5000 [File transfer proxy](/doc/modules/mod_proxy65)
-    5222 [Client connections](/doc/modules/mod_c2s)
-    5269 [Server-to-server connections](/doc/modules/mod_s2s)
-    5280 [HTTP](/doc/http)
-    5281 [HTTPS](/doc/http)
-    5347 [External components](/doc/components)
-    5582 [Telnet console](/doc/console)
+    port     service
+  ---------- ------------------------------------
+    5000/tcp [File transfer proxy](/doc/modules/mod_proxy65)
+    5222/tcp [Client connections](/doc/modules/mod_c2s)
+    5269/tcp [Server-to-server connections](/doc/modules/mod_s2s)
+    5280/tcp [HTTP](/doc/http)
+    5281/tcp [HTTPS](/doc/http)
+    5347/tcp [External components](/doc/components)
+    5582/tcp [Telnet console](/doc/console)
+
+As a rule of thumb, Prosody uses almost exclusively TCP for all its network
+communication. Rare exceptions (such as cooperating external services, e.g. TURN)
+mention the protocol they use in their own documentation.
+
+Of the ports above, the https port uses standard TLS, the http port is unencrypted,
+and "Client connections" and "Server-to-server connections" ports use plain TCP by
+default, but can upgrade a connection using the STARTTLS option. "External
+components" and "Telnet console" only ever listen on a local interface.
 
 # Default interfaces {#default_interfaces}
 

Reply via email to