MDS uses network ports for various communications. In order for certain features to function, the network ports shown below must be accessible.

ServiceProtocolPort(s)TLS?Notes
MicroMDMTCP80,8443ConfigurablePort 80 is only used to enforce a redirect from 80 -> 8443 on the web server
Serve Images over HTTPTCP8888No
Static webserver for mounting images from recovery. Content is served via HTTP due to lack of HTTPS support in macOS Recovery.
MunkiTCP4443ConfigurableUsed by Munki clients to contact Munki Server hosted by MDS.
Imagr Remote LoggingTCP8080NoUsed by Imagr when running workflows to post status back to MDS on workflow progress.

Outbound Connections

All outbound connections are on port 443 unless alternate port is specified below.

MDS Software Update Checkhttps://twocanoes-app-resources.s3.amazonaws.com
Apple supporthttps://support.apple.com/en-us/HT202944
https://identity.apple.com/
In-App links for helphttps://twocanoes.com/
Open Source Project Linkshttps://github.com
https://micromdm.io
https://www.munki.org
https://labs.amplifiedit.com/Centipede/
MicroMDMMicroMDM makes a number of outgoing connections to Apple services, including mdmenrollment.apple.com and the APNS(push notification) service. These outgoing connections require an outbound connections on port 443.
Software Update for Open Source Projectshttps://api.github.com
macOS Software Updates for Download macOShttps://swscan.apple.com