Port 2269: MIKEY — The Secret Handshake Before the Call

What Port 2269 Does

Port 2269 is assigned to MIKEY (Multimedia Internet KEYing), a protocol for exchanging cryptographic keys between parties in a real-time multimedia session.

When you make a VoIP call over a secure channel, the audio itself is encrypted using SRTP (Secure Real-time Transport Protocol). But before any encrypted audio can flow, both sides need to agree on the keys that will do the encrypting. MIKEY handles that negotiation — the secret handshake that happens before the first word is spoken.

IANA assigned port 2269 to MIKEY for both TCP and UDP, registered in August 2004.¹

Why MIKEY Exists

There was already a standard way to exchange keys on the Internet: IKE (Internet Key Exchange), used by IPsec. But IKE was designed for VPNs and network-layer encryption — heavyweight, high-latency, built for setup-once-and-forget scenarios.

Real-time voice and video don't work like that. A phone call begins in milliseconds. You can't afford a multi-round-trip key negotiation before the first audio packet goes out. IKE was the wrong tool.

So engineers at Ericsson Research — Jari Arkko, Elisabetta Carrara, Fredrik Lindholm, Mats Naslund, and Karl Norrman — designed MIKEY: a lightweight, low-latency key management protocol optimized for streaming media. RFC 3830 was published in August 2004.²

MIKEY was designed with clear priorities:

• Low overhead — minimal bandwidth and computation
• Low latency — keys should be ready before media flows
• End-to-end security — the key exchange is between endpoints, not intermediaries
• Flexibility — multiple key distribution methods (pre-shared keys, public key, Diffie-Hellman)

How It Works

MIKEY doesn't carry audio. It carries the parameters needed to secure audio.

A typical flow looks like this:

1. Two parties begin a session setup (via SIP, H.323, or RTSP)
2. MIKEY messages are exchanged — either inline in SDP session descriptions or directly over port 2269
3. Both sides derive a shared master key and security parameters
4. SRTP takes over, using those keys to encrypt the actual media stream

3GPP (the consortium that defines mobile network standards) adopted MIKEY as a key component of their multimedia security architecture, using UDP port 2269 specifically.³

Where You'll See It

Port 2269 traffic appears primarily in:

• VoIP infrastructure — SIP-based phone systems using SRTP
• Video conferencing — H.323 systems with H.235 security
• Mobile networks — 3GPP multimedia systems
• IPTV and streaming — secured real-time media delivery

In practice, MIKEY messages are often carried inline within SIP/SDP signaling rather than over direct TCP/UDP connections to port 2269. The port exists for standalone MIKEY transport when it runs independently.

Checking What's on This Port

To see if anything is listening on port 2269 on your system:

Linux/macOS:

ss -tulnp | grep 2269
# or
lsof -i :2269

Windows:

netstat -ano | findstr :2269

On most machines, nothing will be listening. MIKEY is infrastructure-layer protocol territory — you'd find it on VoIP servers, media gateways, and telecom equipment, not typical desktops.

Related Ports

• 5060/5061 — SIP signaling (where session setup happens, often alongside MIKEY)
• 16384-32767 — RTP/SRTP media streams (the actual audio/video MIKEY secures)
• 3478 — STUN (NAT traversal, often used in the same VoIP stack)