# Protocol support

A full protocol reference is not written yet. In short: the relay carries TLS on port 443 (routed by SNI, never decrypted) and HTTP on port 80 (routed by `Host`), on IPv4; IPv6 clients connect to your airdress directly; DNS PoPs answer on port 53 over UDP and TCP. See the [feature matrix](/reference/feature-matrix/#network-ports-and-protocols) and the [network architecture](/reference/architecture/).