# Port forwarding (HA)

> Add a port forwarding rule so devices can reach a connection that listens for incoming traffic in a High Availability deployment.

Most connections reach out to their device, and need nothing extra. Some connections instead listen for a device to connect in to them, for example a TSL UMD listener or a module with a return port. In a High Availability deployment , devices should connect through the cluster's virtual IP, because it moves to another machine if one goes down. To make a listening connection reachable on the virtual IP, add a port forwarding rule. The rule makes the virtual IP forward the port to whichever machine is running the connection at the moment. Port Forwarding only appears in an HA deployment. On a single machine, devices connect to that machine's address directly and no rule is needed. Before you begin Find the port and protocol the connection listens on. These are usually in the connection's own configuration, such as Listening Port and Port Type . Pick a port that no other connection or workflow forwards, and that Buttons doesn't use itself, such as 80 or 443 . Buttons doesn't check this for you. Add a port forwarding rule Open the connection under Connect . Port Forwarding is below Label on the Config tab. The number shows how many rules are enabled. Select Port Forwarding , then Create Rule . Enter the Port the connection listens on, choose TCP or UDP , and optionally add a Description . Then select Create . Close the Port Forwarding dialog and select Save on the connection. The rule isn't applied until you save. The rule now appears in the list in the Port Forwarding dialog. Select it to see its details under Rule Details . The port on the virtual IP is the same as the port the connection listens on. Point the device at the virtual IP and that port. Change, pause or remove a rule To change a rule, select it in the list and edit it under Rule Details . To pause a rule without deleting it, turn off its Enabled switch. To remove a rule, right-click it and select Delete . Select Save on the connection afterward, as when you add a rule. Tally connections Tally Server (Listen) connections don't need a rule. Buttons forwards their ports automatically. See Send or receive tally and labels over TSL/UMD . Where to go next Forward incoming traffic to a workflow in an HA deployment Network ports reference Deploy Buttons with High Availability