| ID | title | created | status | kind | author(s) | champions |
|---|---|---|---|---|---|---|
| NIP-13 | Nym Exit Policy Update – Opening Additional Ports for User Services | 13-07-2026 | proposed | standard | Serinko, Nym network technical lead & devrel serinko@nymtech.net, Jaya, Chief of strategy jaya@nymtech.net | Merve, Operator technical mentor merve@nymtech.net, Sudo, Head of community simon.toth@nymtech.net |
NIP-13 proposes updating the Nym exit policy to open additional TCP and UDP ports, enabling NymVPN users to access commonly requested services, including communication platforms, wallet infrastructure, gaming services, and other applications, while maintaining privacy and network security.
Motivation
The Nym exit policy defines which ports are accessible on exit nodes to ensure privacy, security, and reliable service
- Zoom Services – require additional ports for reliable meeting connectivity, including audio, video, screen sharing, and Zoom Phone functionality. Currently, some required Zoom ports are unavailable through the Nym exit policy, limiting compatibility for NymVPN users.
- Electrum Wallet Services – require access to specific TCP ports for communication between Electrum wallet clients and Electrum servers. Opening these ports allows NymVPN users to securely connect to Electrum infrastructure while using privacy-preserving network access.
- Rainbow Six Siege Services – require access to specific TCP and UDP ports for game traffic, matchmaking, and service communication. Opening these ports improves compatibility for NymVPN users who access the game through privacy-preserving network connections.
- Genshin Impact Services – require access to specific TCP and UDP ports for game traffic and service communication. Opening these ports allows NymVPN users to connect reliably while maintaining privacy protections.
- eufy Security Services – require access to specific TCP ports for communication with eufy Security infrastructure. Opening these ports improves compatibility for users accessing security devices through NymVPN.
- Epic Games Services – require access to specific TCP and UDP ports for authentication, content delivery, NAT traversal, peer-to-peer connectivity, and media traffic. Opening these ports improves compatibility for NymVPN users accessing Epic Games services while maintaining privacy-preserving network access.
- Google Voice Services – require access to specific UDP ports for media traffic. Opening these ports improves reliability for NymVPN users using Google Voice communication services.
- GTA FiveM Services – require access to specific TCP ports for server communication and administration. Opening these ports improves compatibility for NymVPN users accessing FiveM-based game servers while maintaining privacy-preserving network access.
This update will follow operator governance, consistent with previous exit policy changes (example).
Since NIP-1, exit policy decisions are managed via Nym Governator to ensure transparency and accountability.
Proposal to Enable Ports for NymVPN Users
Zoom Services
*:8801-8810
*:8801-8802
*:5091
*:390
Electrum Services
*:50001
Rainbow Six Siege Services
*:6015
*:10000-10099
*:13000-13005
*:13200
*:14000-14024
Genshin Impact Services
*:22101-22102
*:42472
eufy Security Services
*:12306-12308
Epic Games Services
*:12000-65000
Google Voice Services
*:26500-26501
GTA FiveM Services
*:30110
*:40120
Voting options
Voting takes place at Nym Governator. Proposed options:
- YES: Approve opening the above ports.
- NO: Reject the proposal entirely.
Submit any concerns with supporting documentation for review before finalizing.
Process
If the vote meets quorum and a majority approves:
- A pull request will update the exit policy.
- The Network Tunnel Manager (NTM) will be updated to allow operators to configure WireGuard exit policy ports in line with the Mixnet policy.
Background
The Nym exit policy protects operators and users by controlling accessible ports.
Previously, Network Requesters used a centralized allow list. To decentralize control and enhance privacy, Nym transitioned to a deny list, forming the current exit policy.
Exit nodes in Gateway mode act both as:
- SOCKS5 Network Requesters
- Exit nodes for IP traffic from mixnet and VPN clients
Applying a uniform policy ensures reliable, privacy-preserving service for all NymVPN users.