NIP-3: Nym Exit Policy Update
| ID | title | created | status | kind | author(s) | champions |
|---|---|---|---|---|---|---|
| NIP-3 | Update Nym exit policy | 2025-07-21 | proposed | standard | serinko, Nym network technical lead & devrel serinko@nymtech.net , Max, Senior devrel max@nymtech.net | Casey Ford, Content writer casey@nymtech.net , Sudo, Head of community simon.toth@nymtech.net |
Summary
NIP-3 proposes to update Nym exit policy by opening an access via ports 18080, 18081, 18089, 25551 and 26661 to allow NymVPN users to interact with Monero and DarkFi networks.
Motivation
In an initial technical setup, Network Requesters acted as proxies, and only made requests that match an allow list. This was an IP-based list of domains allowed by default. It was stored at Nym page in a centralized fashion and possibly re-defined by any Network Requester operator.
To decentralize and enable privacy for a broader range of services, Nym transitioned from an allow list to a deny list, thus creating a Nym exit policy.
This was done in an effort to protect Nym node operators, as Nym nodes in Exit Gateway mode act both as SOCKS5 Network Requesters and exit nodes for IP traffic from the Nym Anonymous (mixnet) mode and VPN clients (with both wrapped in the same app).
This policy remains the same for all the nodes, without any option to modify it by Nym node operators individually, to secure stable and reliable service for end users.
Modification happen through operator governance, like in the previous forum poll:
Since Nym Improvement Proposal number 1 (NIP-1), the governance is done via governator.nym.com.
Detailed information
Monero is a private and decentralized cryptocurrency. Ports 18080, 18081 and 18089 are used by the Monero daemon to communicate with the blockchain in order to synchronize and announce transactions. This port is currently not allowed by Nym exit policy. You can read more about Monero at getmonero.org.
DarkFi is a base layer for anonymous applications and smart contracts that aims to be multi-chain interoperable. Ports 25551 and 26661 are used to communicate with DarkFi nodes via Tor or clearnet respectively. These ports are currently not allowed by Nym exit policy. You can read more about DarkFi at dark.fi.
Proposal to enable ports 18080, 25551 and 26661 for NymVPN users
We propose to open up these ports for Mixnet and Wireguard exit policies:
*:18080
*:18081
*:18089
*:25551
*:26661
Voting options
Voting takes place at Nym Governator. These are the options to choose from:
- YES TO ALL - I agree to enable all proposed ports for Nym exit policy:
18080,18081,18089,25551and26661 - YES TO MONERO ONLY - I agree to only open ports
18080,18081and18089for Nym exit policy - YES TO DARKFI ONLY - I agree to only open ports
2551and26661for Nym exit policy - NO - I don’t want to open none of these ports for Nym exit policy
Process
If the vote meets needed quorum and majority of votes will be for some the changes, a pull request will be issued to change the exit policy, which will take an immediate effect.