NIP-8: Nym Exit Policy Update – Opening Ports for XMR Mining, Zwift, Gaming, and Voice/Video Services
| ID | title | created | status | kind | author(s) | champions |
|---|---|---|---|---|---|---|
| NIP-8 | Nym Exit Policy Update – Opening Ports for XMR Mining, Zwift, Gaming, and Voice/Video Services | 03.03.2026 | in vote | standard | Serinko, Nym network technical lead & devrel serinko@nymtech.net, Jaya, Chief of strategy jaya@nymtech.net |
Merve, Operator technical mentor merve@nymtech.net, Sudo, Head of community simon.toth@nymtech.net |
Motivation
The Nym exit policy defines which network ports are accessible through exit nodes, ensuring privacy and security while maintaining network reliability.
Several new use cases and user requests require additional ports:
- XMR mining pools – Monero mining clients require specific ports to connect to pools.
- Zwift indoor cycling – Requires TCP/UDP ports for stable multiplayer and voice communication.
- Gaming – Blizzard/World of Warcraft client, patching, and voice chat.
- Voice & Video – Discord and similar services need reliable UDP ranges and WebSocket TCP ports.
Currently, these ports are blocked by the Nym exit policy, creating limitations for NymVPN users who rely on these services for secure and private communication.
Opening them enhances user experience without compromising Nym’s privacy and security standards.
This change will be implemented through operator governance, following the same process as previous exit policy modifications.
Since NIP-1, exit policy decisions are managed via Nym Governator, ensuring transparency and accountability.
Proposal: Enable Additional Ports for NymVPN Users
We propose opening the following ports for both Mixnet and WireGuard exit policies:
- XMR / Monero Mining Pools:
3333, 4444, 8888, 14444 - Zwift Indoor Cycling:
443, 3022–3025 - Blizzard / World of Warcraft Gaming:
80, 443, 1119–1120, 3724, 4000, 8080, 8085, 6012, 6112–6114 - Blizzard games and services (incl. WoW):
80, 443, 1119, 1120, 3074, 3478-3479, 3724, 4000, 4379-4380, 5060, 5062, 6112-6120, 6250, 27000-27050, 27036 - Voice & Video (Discord, WebRTC):
443, 2053, 2083, 2087, 2096, 8443, 19294–19344, 50000–50032 - Play Station, Play Station connect:
3479, 3480 - Websockets:
6300 - Death Stranding:
2703, 27015, 27031-27036 - Steam Client UDP remote port - Game traffic:
27000-27250
Voting
Voting takes place at Nym Governator.
Proposed options:
- YES – Approve opening all listed ports.
- NO – Reject the proposal entirely.
Submit any concerns with supporting documentation for review before finalization.
Process
If the vote meets quorum and a majority approves:
- A pull request will update the exit policy.
- The Network Tunnel Manager (NTM) will be updated to allow operators to configure WireGuard exit policy ports in line with the Mixnet policy.
Background
The Nym exit policy protects operators and users by controlling accessible ports.
Previously, Network Requesters used a centralized allow list. To decentralize control and enhance privacy, Nym transitioned to a deny list, forming the current exit policy.
Exit nodes in Gateway mode act both as:
- SOCKS5 Network Requesters
- Exit nodes for IP traffic from mixnet and VPN clients
Applying a uniform policy ensures reliable, privacy-preserving service for all NymVPN users.