TCP connection checks
Verify that the selected port accepts a connection from a probe region. Use it for public listeners that are not covered by an HTTP check.
Check whether a public TCP service accepts connections. Watch mail, SSH, database gateways and other listeners that need a more focused check than a website monitor.
Some of the services you rely on do not speak HTTP. Port monitoring opens a TCP connection to a host and port, giving you a straightforward availability signal for a service listener.
Keep connection timing and status history beside your other monitors. An open port is a starting point for reliability checks; combine it with application-level monitoring when you also need to verify the response.
Keep this signal alongside the rest of your stack: organize related services, choose who receives alerts and follow recovery in the same workspace. The goal is a check that explains what changed and gives the right person a useful place to start.
Purpose-built checks.
Information you can act on.
Verify that the selected port accepts a connection from a probe region. Use it for public listeners that are not covered by an HTTP check.
Specify the host or IP and a port from 1 to 65535. Separate monitors for separate listeners make it clear which service has become unreachable.
Review DNS lookup, TCP connection and total connection time in the latest result. Timing detail helps distinguish slow setup from a refused connection.
Use the regions relevant to the service. Comparing their results can help identify firewall rules or path differences that affect only part of your audience.
Follow status, uptime and response time across checks. The historical view gives useful context when intermittent connection problems are difficult to reproduce.
Choose your failure policy and destinations. Notify the team when a listener goes down and when it begins accepting connections again.
One reliable signal.
Plenty of practical uses.
Check that the expected SMTP or IMAP listener can be reached. The connection check is useful alongside the operational checks you use to verify message delivery.
Watch public SSH or other controlled entry points. Keep your existing access policy; a monitor should fit the service’s intended exposure.
Monitor non-HTTP listeners such as a game service or integration gateway. Use a separate application check when the protocol response itself must be validated.
Use a meaningful name, choose the behavior you expect and make sure the alert reaches someone who can act. Start with one service, then add the related checks as your monitoring grows.
Open the setup guideChoose Port and enter a hostname or public IP address together with the TCP port number.
Choose the check regions and interval. Confirm that the service is intended to accept those connections under your existing access policy.
Set alert channels and the consecutive failure setting. Compare connection details when a result differs between regions.
The details that help you choose the right check and get a useful result.
Read the full documentationNo. A successful check means the TCP connection was accepted. It does not prove that a database query, mail delivery or application-level operation will succeed.
This monitor checks TCP connections. It is not a UDP protocol check.
No. Keep private services private. Public probe checks should only target services that are already intended to be reachable under your access policy.
The service may restrict source networks or a firewall may reject probe traffic. Compare the regional results and your access rules before changing the monitor.
Port monitors have a plan-specific allowance. The monitor form and your billing page show the capacity available to your workspace.
Bring port monitoring into your workspace.