NIP-7: Nym Exit Policy Update - Opening Ports for Steam, Discord, and SSH/Certificate Services
| ID | title | created | status | kind | author(s) | champions |
|---|---|---|---|---|---|---|
| NIP-7 | Nym Exit Policy Update - Opening Ports for Steam, Discord, and SSH/Certificate Services | 23.01.2026 | proposed | standard | Serinko, Nym network technical lead & devrel serinko@nymtech.net Jaya, Chief of strategy jaya@nymtech.net |
Merve, Operator technical mentor merve@nymtech.net Sudo, Head of community simon.toth@nymtech.net |
NIP-7 proposes updating the Nym exit policy by opening specific UDP and TCP ports. This will allow NymVPN users to access Steam and play games like Rocket League, Apex Legends, CS2, and others, as well as use Discord voice chat and alternative SSH/certificate services, without compromising network privacy or security.
Motivation
The Nym exit policy controls which network ports are accessible through exit nodes, protecting both operators and users while maintaining overall network reliability. Many modern games and communication platforms require certain ports for gameplay, matchmaking, and voice/video communication.
By opening the ports listed below, NIP-7 aims to enhance the user experience while maintaining Nym’s privacy and security standards.
Proposal to enable game ports for NymVPN users
We propose opening the following ports for both Mixnet and WireGuard exit policies:
- Steam: 3478, 4379–4380
- Discord voice chat: 50000–65535
- SSH / Certificate services: 2222, 223
Voting takes place on the Nym Governator.
Proposed options:
- YES: Approve opening all listed ports.
- NO: Reject the proposal entirely.
Note: Should you have any concerns, please submit them along with supporting documentation to allow the team to evaluate potential risks and make an informed decision.
Process
- Discussion and finalization of proposal
Before the Governator vote, please share any errors or missing ports below. Feedback will be considered to finalize the proposal by EOD Friday, 23.01.2026.
- Voting begins on Governator
The vote will begin on Friday, 23.01.2026, and remain open for 5 days, closing on Wednesday, 28.01.2026.
- Outcome and implementation
If the vote meets quorum and the majority approves, a pull request will update the exit policy. The Network tunnel manager (NTM) will be updated to allow operators to configure WireGuard exit policy ports in line with Mixnet policy.
Background
The Nym exit policy protects operators and users by controlling accessible ports. Previously, Network Requesters used a centralized allow list. To decentralize control and enhance privacy, Nym transitioned to a deny list, forming the current Nym exit policy.
Exit nodes in Gateway mode act both as SOCKS5 Network Requesters and as exit nodes for IP traffic from mixnet and VPN clients. Applying a uniform policy ensures reliable, predictable, privacy-preserving service for all NymVPN users.