# Balena tunnel network requirements

**URL:** <https://forums.balena.io/t/balena-tunnel-network-requirements/210574>\
**Category:** Product support\
**Tags:** network\
**Created:** [November 11, 2020, 6:54am UTC](https://forums.balena.io/t/balena-tunnel-network-requirements/210574 "2020-11-11T06:54:45Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![tomdewinter](https://avatars.discourse-cdn.com/v4/letter/t/a3d4f5/32.png) [@tomdewinter](https://forums.balena.io/u/tomdewinter)\
**Post date:** [November 11, 2020, 6:54am UTC](https://forums.balena.io/t/balena-tunnel-network-requirements/210574/1 "2020-11-11T06:54:45Z")

</div>

Hello,

Somehow `balena tunnel` is not working when I’m connected to our company network.

```
PS C:\Users\tdewinter> balena tunnel c0c19ef789b536f177debee26be9ca27 -p 8080
[Info] Opening a tunnel to c0c19ef789b536f177debee26be9ca27...
[Info] - tunnelling localhost:8080 to c0c19ef789b536f177debee26be9ca27:8080
[Info] Waiting for connections...
[Error] 127.0.0.1:61156 => 127.0.0.1:8080 ===> 10.240.35.17:8080 :: Device is not listening on port 8080

```

At home or when using a mobile hotspot, tunneling is working properly.

I’ve asked our IT to check if the firewall is properly set, however they couldn’t find something that could cause these problems.

Can someone supply me with a list of network requirements needed for tunneling? Our give me a possible solution for this problem?

Thanks!

---

<div class="post-metadata">

**Author:** ![markcorbinuk](https://sea2.discourse-cdn.com/balena/user_avatar/forums.balena.io/markcorbinuk/32/4771_2.png) [@markcorbinuk](https://forums.balena.io/u/markcorbinuk)\
**Post date:** [November 11, 2020, 11:23am UTC](https://forums.balena.io/t/balena-tunnel-network-requirements/210574/8 "2020-11-11T11:23:36Z")

</div>

Hello @tomdewinter

To be able to use `balena tunnel` from your company network you will need to ensure that it will allow outgoing connections to TCP port 3128.

---

<div class="post-metadata">

**Author:** ![tomdewinter](https://avatars.discourse-cdn.com/v4/letter/t/a3d4f5/32.png) [@tomdewinter](https://forums.balena.io/u/tomdewinter)\
**Post date:** [November 11, 2020, 3:03pm UTC](https://forums.balena.io/t/balena-tunnel-network-requirements/210574/10 "2020-11-11T15:03:07Z")

</div>

Hi @markcorbinuk

Thanks for your response.

Normally all outgoing ports in our network are opened. However, somehow this traffic was blocked by the router. IT changed some things and now it works. Thanks again!

---

<div class="post-metadata">

**Author:** ![nazrhom](https://avatars.discourse-cdn.com/v4/letter/n/ee59a6/32.png) [@nazrhom](https://forums.balena.io/u/nazrhom)\
**Post date:** [November 11, 2020, 3:16pm UTC](https://forums.balena.io/t/balena-tunnel-network-requirements/210574/12 "2020-11-11T15:16:09Z")

</div>

Hello Tom, thanks for letting us know, glad to hear it is working fine for you now.

---

<div class="post-metadata">

**Author:** ![bversluijs](https://sea2.discourse-cdn.com/balena/user_avatar/forums.balena.io/bversluijs/32/3954_2.png) [@bversluijs](https://forums.balena.io/u/bversluijs)\
**Post date:** [November 12, 2020, 10:10am UTC](https://forums.balena.io/t/balena-tunnel-network-requirements/210574/13 "2020-11-12T10:10:12Z")

</div>

As an added question, is it sufficient that the network from which you’re using the `balena tunnel` command allows outgoing connections on TCP port 3128? So the network of the device you’re trying to tunnel to only needs port 80 and 443 and not 3128?

I’m asking this because our firewall allows outgoing connections on TCP port 3128, but we’re not in control of the firewalls our devices are behind.

---

<div class="post-metadata">

**Author:** ![richbayliss](https://sea2.discourse-cdn.com/balena/user_avatar/forums.balena.io/richbayliss/32/1054_2.png) [@richbayliss](https://forums.balena.io/u/richbayliss)\
**Post date:** [November 12, 2020, 11:17am UTC](https://forums.balena.io/t/balena-tunnel-network-requirements/210574/14 "2020-11-12T11:17:50Z")

</div>

Bart

Yes this is correct; the tunnel goes over the device’ VPN so the network that the device is running inside of wouldn’t know about it. As long as the device has an active VPN with our cloud, it will work.