Control connection for SNIF, an SNI-based end-to-end TLS forwarding relay.
IANA assigned 7123 to VESvault Corp in December 2021 as snif, referencing draft-zubov-snif section 4.3: the TCP port is the SNIF end-to-end TLS relay control connection, and the UDP registration covers the same relay over QUIC. SNIF lets a device behind NAT allocate a public hostname, obtain a publicly trusted certificate for it, and accept inbound TLS connections through a relay that forwards by SNI without ever holding the private key. A connector on the device keeps the control connection to the relay open; the relay is the side that listens on 7123.
Fine to expose
A SNIF relay is meant to be publicly reachable, and the design keeps the TLS private key on the end device so the relay only forwards ciphertext.
$ nc -vz TARGET 7123Seen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.
Get Beige Box →also available as JSON · Markdown
Corrections or a missing port? Reply @rimrocksystems.