iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Need a server to try this on? Antihost offers Linux VPS plans with NVMe storage, full root access and a 14-day free trial.
To run a Mumble server on a VPS, install Mumble’s server component, Murmur (usually packaged as mumble-server), give it persistent storage, open TCP and UDP port 64738, set a SuperUser password, and configure TLS and ICE before inviting users. You can deploy it as a native Linux service or with the official Docker image.
The native package integrates with the VPS operating system and service manager. Docker makes the application and upgrades more self-contained, but requires deliberate volume, ownership, logging, and secret management. The steps below cover both approaches, then show how to validate, secure, back up, and troubleshoot the finished server.
What Murmur is and what a VPS deployment needs
Mumble has two components: the desktop or mobile client and the server component, historically called Murmur and commonly installed from a package named mumble-server. Murmur hosts voice channels, user accounts, permissions, bans, logs, and the database that stores your server state.
A production VPS should have a public IPv4 address, and preferably IPv6 if your users need it, a DNS name, current security updates, SSH access, persistent disk storage, and a host or cloud firewall. Reserve storage for the Murmur database, configuration, certificates, and logs. Decide before installation whether your operating system will manage the service or whether Docker will manage the container.
#1 Best Overall
- Powerful Turbo Fan:CAGIWIRU Electric Air Duster have reached speed up to 130000RPM,Can efficient remove dust and debris.With LED light and Three Adjustable Speed to meet with different cleaning tasks.
- With Attached USB C Fasting Charging cable.Charing 3 hours,Enjoy up to 240 minutes of use on the lowest setting, For third speed can use for 25mins.with four charging options to meet with your needs.
- Wide Application: attached 5 different nozzles,making it suitable for a variety of scenes, such as car,pet, pc, keyboards, and other electronic devices. It also serves for office and home clean duster.
- Handy Design & Portable:Cordless air duster electric nozzle is Light weight and small size, design and comfortable to hold and space saving, convenient to carry around. You can put it in your room or inside the car without taking up space.
- Economical &Reusable: Built durable materials with a long-lasting battery,our CAGIWIRU air duster it's a sustainable alternative to disposable air cans.
Ports and protocols
The default voice port is 64738. Clients need both TCP and UDP on that port: UDP carries real-time voice, while TCP is used for connection control and related traffic. If you change the configured port, open the replacement port in every layer: the VPS firewall, the cloud provider’s firewall or security group, any router or load balancer, and the client connection settings.
Murmur can host more than one virtual server process. Additional virtual servers use ports incrementing from the first bound port, so a first server on 64738 can result in another on 64739. Plan firewall rules and DNS documentation for every port you actually use.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Choose a deployment method
| Decision | Native package | Docker image |
|---|---|---|
| Operating model | Runs under the distribution’s service manager and account model. | Runs as a container managed by Docker. |
| Upgrades | Follow the distribution package lifecycle and repository versions. | Pin a tested image tag such as a stable vX.Y.Z release; latest follows the newest image. |
| Persistent state | Keep the configured database and logs on the VPS filesystem. | Bind a persistent host directory to the container’s /data directory. |
| Filesystem ownership | The package creates or uses its service account and expected paths. | You must ensure the mounted directory is writable by the container process. |
| Observability | Use the service manager’s status and journal commands. | Use Docker status, logs, and inspect commands, plus the application logs in persistent storage. |
| Certificate automation | Install certificates on the host and arrange renewal and reload. | Use host-managed certificates or the image’s ACME variant with persistent account and certificate data. |
Choose the native package when you want the fewest moving parts and conventional Linux administration. Choose Docker when your VPS already standardizes on containers or you need repeatable image-based deployments. Do not run both methods against the same port or data directory.
Prepare the VPS
- Update the operating system. On an Ubuntu or Debian-style VPS, run
sudo apt updatefollowed bysudo apt upgrade, then reboot if the kernel or other critical services require it. - Create DNS. Point a hostname such as
mumble.example.netto the VPS address. Use the same hostname when obtaining a TLS certificate and when clients connect; certificate names must match the name users enter. - Confirm network policy. Check that your VPS provider permits inbound UDP, not only TCP, and note any bandwidth quota. Voice quality depends on UDP reachability and sufficient egress capacity.
- Enable a host firewall. Keep SSH restricted to your administration addresses where practical. Add the Mumble voice port only after you know which port Murmur will use.
- Plan backups. The database contains channels, ACLs, users, and bans. Include it, the INI file, certificate material where policy permits, and Docker’s mounted
/datadirectory in a backup plan.
Install Murmur as a native Linux service
Install the package
Package names vary by distribution, but the common Debian and Ubuntu package is mumble-server. On Ubuntu, install it with:
sudo apt update
sudo apt install mumble-serverSome package installers ask whether to start the server automatically or whether to enable high-priority networking. Select the option that matches your policy; you can change service behavior later. Locate the installed INI file, commonly /etc/mumble-server.ini, rather than assuming every distribution uses the same path.
Start the service and inspect its logs
sudo systemctl enable --now mumble-server
sudo systemctl status mumble-server
sudo journalctl -u mumble-server --no-pagerA running service is not proof that clients can connect. The status output should show the process is active, while the journal should reveal configuration syntax errors, permission failures, certificate problems, or a port already in use.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutePC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Set the SuperUser password once
SuperUser is Murmur’s built-in emergency administrator. It bypasses all access controls, so use it only for initial setup or recovery. Store its password in a password manager and do not use it as the daily account for moderators.
Rank #2
- Screen Cleaner is Your Screen’s New Bestfriend! - EVEO is proud to present a screen cleaner that’s perfectly suited for your TV. Meet your new screen cleaner, computer screen cleaner, laptop cleaner, iPad cleaner, Macbook,tv cleaner or any other electronic device. Our screen cleaner spray and wipe along with the included plush microfiber cloth, easily removes dust, fingerprints & other smudges on the screen’s surface. Clean effectively for a streak-free screen
- Gentle on your Screens - Our screen cleaner spray and wipes is compatible to be used even for the most sensitive LCD, LED, CRT, and OLED screens in proper use. Be at ease knowing that this product is compatible with all the major brands: LG, SONY, Samsung, Sharp, iPad, iPhone, Android screens, Kindle, PC monitors - we’ve got you covered! Can be used as LCD screen cleaner, tv cleaner, smart tv screen cleaner, and more
- Premium Super Soft Plush Microfiber Cloth - Included in this efficient screen cleaning kit. This screen cleaner spray and wipe has our signature plush microfiber cloth specially designed to comply with screens and monitors and leave them streak-free. Has been shown to effectively absorbs stubborn stains, zero streaks, and no fiber shedding. Always use this together with our screen cleaner for the best results
- Easy-to-Use Screen Cleaner Kit + microfiber cleaning cloth - The EVEO Screen Cleaning Kit will easily be your new favorite tool when it comes to taking care of the things you love most, quick and easy solution for a streak-free screen. Simply screw on the sprayer gun on the screen cleaner bottle. Spray the cleaning liquid onto the microfiber cloth, then wipe the screen until desired cleanliness & shine is achieved.
- Quality Screen Care Kit Worth Purchasing - Enjoy a convenient Screen Cleaner anytime, anywhere you need it. Your satisfaction is our top priority. We stand behind the quality of our products and that’s why, you shouldn’t be worrying at all. We manufacture the Best Screen Cleaner. and can be used for laptop cleaning kit, laptop screen cleaner, tv screen cleaner for smart tv. MacBook screen cleaner, monitor cleaner or screen cleaner spray for electronic devices with microfiber cleaning cloth
Stop the service while setting the password so a second process does not compete for the database or listening port. Use the executable’s documented option against the same INI file:
sudo systemctl stop mumble-server
read -r -s MUMBLE_SUPERUSER_PASSWORD
sudo mumble-server --ini /etc/mumble-server.ini --set-su-pw "$MUMBLE_SUPERUSER_PASSWORD"
unset MUMBLE_SUPERUSER_PASSWORD
sudo systemctl start mumble-serverOn packages that expose the short form, -supw is the equivalent of --set-su-pw. Confirm the exact executable and INI path with your distribution’s man page. Avoid putting the real password directly in a shell command that will remain in shell history.
Configure the Murmur INI file
Murmur’s configuration is line-oriented: one key=value setting per line. Blank lines and text after a # are ignored. Edit the file as root, save a backup before changing it, and restart or reload only after checking the syntax.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
# /etc/mumble-server.ini
welcometext=Welcome to the community voice server.
port=64738
users=100
bandwidth=558000
database=/var/lib/mumble-server/mumble-server.sqlite
logfile=/var/log/mumble-server/mumble-server.log
sslCert=/etc/letsencrypt/live/mumble.example.net/fullchain.pem
sslKey=/etc/letsencrypt/live/mumble.example.net/privkey.pem
# serverpassword=Set the server identity and capacity
Choose a distinct welcome message and server name so users can identify the correct instance. Set users to a limit your VPS can support rather than an arbitrary maximum. The documented default bandwidth=558000 is measured in bits per second per user; it is a configuration default, not a guarantee that a small VPS or its network plan can sustain any particular number of simultaneous speakers.
Estimate concurrent users, voice activity, operating-system overhead, backups, and monitoring before selecting a plan. Leave CPU and memory headroom for connection bursts and other services. If users experience loss or robotic audio, inspect UDP reachability and VPS bandwidth before simply increasing the Murmur limit.
Choose the listening port
port=64738 preserves the standard client default. A different value is valid, but document it and change the firewall and client connection port together. If you create additional virtual servers, account for the incrementing ports in your firewall and monitoring rules.
Decide how users authenticate
serverpassword applies a shared password at the server level. It can be appropriate for a small private group, but individual registered accounts and ACLs provide better control, revocation, and auditing. Leave the setting empty when you intend to meet the requirements for public registration.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errorsRank #3
- 【Large size】：Measuring 800 x 300 mm/ 31. 5×12 inches, which is wider and taller than others. Large mouse pad can perfectly fit your keyboard and mouse of any size, and there is also ample space for peripherals such as phones, tablets, etc.
- 【LED backlight mouse pad】：Blade Hawks RGB mouse pad provides 7 static modes and 7 dynamic modes will give you the options you are looking for. Power-off memory function remembers the last lighting mode you selected. The super glow fiber Chroma will give you a colorful gaming setup that you want.
- 【Anti-slip rubber base】：Made from Natural rubber, this gaming mousepad will firmly grip your desktop, allowing you to enjoy the ultimate precision in the games you are most passionate about. It also comes with a texture that enhances this ability even further.
- 【Smooth and waterproof surface】: Micro-textured cloth surface, for extremely precise mouse control and a smooth movement. When liquid splashes on the gaming mouse pad, it forms water droplets and slides down. Will not delay your work or gameplay.
- 【Plug and play】: This mouse and keyboard pad is powered by USB, plug and play, no driver required. One button control light modes. Press one time to change the lighting mode, press twice to change the brightness, press and hold about 3 seconds turn ON/OFF.
Keep database and logs persistent
Use paths on persistent storage, not a temporary directory. Verify that the Murmur service account can write the database and log paths and that log rotation will not fill the disk. Back up the database while the service is stopped or with a database-consistent procedure supplied by your distribution.
Open only the required network paths
For a default installation, allow both protocols:
sudo ufw allow 64738/tcp
sudo ufw allow 64738/udp
sudo ufw status verboseIf you use a cloud firewall, duplicate the TCP and UDP rules there. Test from a network other than the VPS itself, because a local connection can succeed even when an upstream security group blocks the public path. Do not expose Murmur’s ICE administration listener to the internet.
Secure ICE administration
ICE is an administrative interface for controlling virtual servers. Mumble’s configuration documentation warns: “Without secrets configured anyone with access to the ICE port has full administrative access to every virtual server on the mumble-server process.” Treat the ICE listener as a management plane, not as a client feature.
- Bind ICE to localhost whenever your administration tools run on the VPS itself.
- If remote administration is required, restrict the listener with a firewall to a fixed management network or VPN address range.
- Set both
icesecretreadandicesecretwriteto long, unique secrets stored outside public configuration examples. - Give the Murmur service account read access to the configuration while preventing ordinary users from reading the secrets.
- After changing ICE settings, inspect the service status and verify from an untrusted network that the ICE port is not reachable.
Never rely on an obscure port as protection. A reachable ICE endpoint without proper secrets is equivalent to an administrative login.
Recommended Free Tools
Configure TLS correctly
TLS protects the client connection and lets clients verify the server identity. Obtain a certificate whose name matches the DNS hostname users will enter. Keep the private key readable by the Murmur service account but not by unprivileged users, and ensure parent directories do not grant unnecessary access.
Host-managed certificates
Point sslCert to the certificate chain and sslKey to the private key in the INI file. If your certificate tool renews files in place, test the complete lifecycle: renewal, Murmur’s certificate reload, and a new client connection that reports the expected hostname and expiry.
The server can reload TLS settings with its documented reload signal without interrupting active service. Use the service manager’s reload action if your unit provides one; otherwise follow the distribution’s Murmur documentation for the appropriate signal. Confirm in logs that the new certificate was accepted instead of assuming a file replacement was sufficient.
Rank #4
- 【Softer and More Comfortable】Vaydeer wrist rest has unique diamond pattern, which is the combination of softness and aesthetics. The materials of wrist rest are improved into higher quality memory foam and covered with silky smooth lycra. The computer wrist rest makes you as comfortable and cushiony as like rest your wrists on clouds.
- 【Ergonomic Wrist Saver】The wrist rests for keyboard and mouse comes with a 17.32×3.15×0.83 inch keyboard wrist pad and a 5.94×3.15×0.83 inch mouse wrist support. Based on ergonomic design, the unique concave shape is the perfect fit for your wrist joints. The wrist rest pad fits most computer keyboards and laptops, improve hand and wrist posture, release your wrist and arm stress.
- 【Non-Slip Rubber Bottom】Featuring an anti-skid silicone base on the bottom, this wrist keyboard support stays firmly in place on your desk, preventing the padding from sliding around, ensuring stable and consistent wrist support during extended computer sessions.
- 【Better Experience & Pain Relief】Our keyboard arm rest is beneficial to alleviate the soreness caused by direct contact and friction between your arm and a hard desk surface, reducing the risk of wrist fatigue or carpal tunnel. The soft texture of memory foam can evenly distribute the pressure around your wrists and provide good support with just enough give.
- 【Helpful in Multiple Scenarios】Whether you're working, studying, writing, typing, gaming, this keyboard and mouse rest combo is an essential accessory to add comfort and support to your hands and wrists. It’s also a great gift for men, women, family, friend, coworker, gamer, teacher, etc.
Docker ACME option
The official image includes an -acme variant that can issue and renew certificates when you supply an account email, domain, persistent storage, and the required HTTP or DNS challenge settings. Ensure the challenge can reach the VPS and that the account and certificate data survive container replacement. If you manage certificates outside the image, mount them read-only where possible and arrange a controlled reload after renewal.
Optional public registration
Public listing is not required for a private community. The documented registration requirements are cumulative:
serverpasswordmust be empty.- The server must be reachable worldwide, not only from a corporate network or allowlist.
- A valid TLS certificate with TLS enabled must be configured, or Murmur’s automatically generated self-signed certificate must be in use.
registerHostnamemust resolve publicly to the server.
If any requirement is unsuitable for your community, leave registration disabled and distribute the hostname and port privately. Before enabling it, test DNS from more than one public resolver and confirm that the advertised name is the same name on the certificate.
Create ordinary administrative accounts and ACLs
After confirming SuperUser access, create a normal named account for each administrator and grant only the permissions that role needs. Use channel and server ACLs for moderators, temporary staff, and guests. Keep SuperUser credentials offline for recovery; do not share one bypass account among several people.
Free tools Windows power users keep installed
One-click scans. No signup required.
Test permissions with a non-administrator account. Verify that a moderator can perform expected actions, cannot alter protected settings, and cannot reach ICE. Remove or disable accounts when staff responsibilities change, and review ACL inheritance after adding new channels.
Deploy with Docker instead
Docker requires an installed and maintained Docker Engine. The official image stores Murmur’s persistent state in /data; bind that directory to durable host storage. The documented basic deployment is:
docker run --detach
--name mumble-server
--publish 64738:64738/tcp
--publish 64738:64738/udp
--volume ./data/mumble:/data
--restart on-failure
mumblevoip/mumble-server:<tag>Replace the image tag with a tested release tag rather than relying on an unpinned moving target. Tags such as vX.Y.Z identify stable releases, while latest tracks the newest image and can change when you recreate the container.
Best Value
- 【No Drill Mounted】Cable management tray can be assembled in as little as 3 minutes or less-simply. Side clips easily clampe the edge of desk, pass through the holes on the sides, and secure excess cables with baskets. Desk cable management supports inward or outward installation to meet your needs in different scenarios, and provides you with great convenience when collecting and organizing wires.
- 【Rubber Pad Protects Desk】Wire organizer under desk built-in soft rubber pads on the clamp protect your desk from scratches, so you will not damage your furniture or office.
- 【Sturdy and Beautiful】Cord management under desk is made of high-quality carbon steel and holds about 15 lbs. The wire basket has 2 holes on each side of the tray to enable your cables to pass freely. Cable baskets are suitable for desk thickness use from 0.4" to 2.4".
- 【Space Saving & Keep Organized】Desk cable management tray holds all your power cords, outlet strips, USB hubs and computer transformers hidden from your feet, and the data cables will not enter the vacuum cleaner to keep your desk clean and tidy. Desk wire organizer is also suitable for use in the kitchen and outdoors.
- 【Reduce Safety Risks】Cable tray under desk keeps all plugs away from your kids, no more worry about tripping. Using 2 holes wire tray saves extra space, helps you easily cabling and wire protection. The mesh design is not easy to accumulate dust, but avoids safety accidents caused by messy wires.
Supply configuration and the SuperUser secret
The image accepts Murmur settings through environment variables named MUMBLE_CONFIG_<configName>. It also supports MUMBLE_SUPERUSER_PASSWORD for setting the administrative password. Keep these values in a protected environment file or secret-management system rather than placing them in a publicly readable compose file or shell history. Do not publish ICE just because the container publishes the voice port.
Operate and update the container
docker ps --filter name=mumble-server
docker logs --tail 200 mumble-server
docker inspect mumble-serverBefore an upgrade, back up the mounted ./data/mumble directory and record the image tag and environment settings. Pull the replacement image, stop and remove the old container, then recreate it with the same persistent volume and ports. Never delete the data directory as part of routine container replacement.
VPS sizing and provider checks
| Check | Why it matters | What to verify |
|---|---|---|
| UDP availability | Voice traffic needs timely datagrams. | The provider and every firewall layer allow inbound and outbound UDP on the chosen port. |
| Public addressing | Clients need a reachable endpoint. | Stable public IPv4, and IPv6 if required, with DNS records that match the certificate. |
| Bandwidth quota | The per-user bandwidth setting does not override a provider cap. | Monthly transfer limits and burst policies cover expected concurrent users. |
| CPU and RAM | Murmur is lightweight, but the VPS also runs the kernel, logging, backups, and monitoring. | Enough headroom for peak connections and other workloads. |
| Persistent disk | Database and certificates must survive reboots and container replacement. | Durable storage, free-space monitoring, and tested backups. |
| Region and latency | Distance affects perceived voice delay. | A region near the majority of users and a route with acceptable latency. |
| Provider support | Network incidents and abuse controls can affect reachability. | Documented firewall controls, reverse-DNS options if needed, and responsive incident handling. |
Current provider prices and affiliate terms are not a reliable part of the Murmur configuration decision; compare the technical characteristics above against your user count and operating requirements.
Validate the finished server
- Check the process. Confirm the native service is active, or that the Docker container is running, and review recent logs for errors.
- Check listeners. Verify that Murmur is bound to the intended TCP and UDP port and that no unrelated process owns it.
- Test externally. From a different network, connect with the VPS DNS name or IP and the configured port. Test voice in both directions.
- Test administration. Log in with SuperUser once, then use a normal administrative account for routine work.
- Test isolation. From the public internet, confirm that ICE is unreachable and that only the intended voice ports respond.
- Test TLS. Check the hostname presented to clients, certificate expiry, private-key permissions, renewal, and the reload procedure.
- Test persistence. Restart the service or container and verify that the database, channels, ACLs, accounts, and credentials remain intact.
- Test registration if enabled. Confirm public DNS resolution, worldwide reachability, an empty
serverpassword, and valid TLS before expecting a listing.
Troubleshoot the common failures
| Symptom | Likely cause | Action |
|---|---|---|
| Clients time out | Wrong port, missing UDP rule, cloud firewall block, or DNS pointing elsewhere. | Compare the INI port with host and cloud firewall rules, test both protocols, and resolve the hostname from an external network. |
| TCP connects but voice is unusable | UDP blocked, packet loss, or insufficient bandwidth. | Confirm UDP in every firewall, inspect provider transfer limits, and reduce competing traffic before changing Murmur’s user limit. |
| Service exits immediately | INI syntax error, invalid path, occupied port, or unreadable certificate. | Read the service journal, validate one key=value per line, check ownership and paths, and identify processes already listening on the port. |
| TLS warning or hostname error | Certificate name does not match the client hostname, chain is incomplete, or the old certificate is still loaded. | Use the exact DNS name on the certificate, provide the full chain, verify file permissions, then perform the documented reload and reconnect. |
| SuperUser login fails | Password was set against a different INI/database, a second instance was running, or the password was mistyped. | Stop the service, identify the active INI and database paths, set the password once against that configuration, restart, and test again. |
| Docker restart loses channels or accounts | The container was recreated without the persistent /data mount or the host directory is not writable. |
Inspect the container mounts, restore the original data directory, correct ownership, and recreate the container with the same volume. |
| Public registration does not appear | Server password is set, DNS is private or incorrect, worldwide access fails, or TLS requirements are unmet. | Check each registration requirement individually; private servers should remain unlisted. |
Backups, upgrades, and ongoing hardening
Back up what makes the server yours
Back up the Murmur database, INI configuration, ACL-related state, and the Docker /data directory when applicable. Protect backups because they may contain account and administrative data. Keep at least one copy off the VPS and periodically perform a restore test on an isolated instance.
Upgrade deliberately
For native installs, read the distribution’s package changelog, back up first, upgrade during a maintenance window, and inspect logs after restarting. For Docker, pin a tested image tag, preserve the data volume, and record the previous tag so you can roll back. Do not combine an application upgrade with an unplanned filesystem or firewall redesign.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Review exposure regularly
- Apply operating-system and Docker security updates.
- Keep SSH protected with keys, limited source addresses, and no unnecessary password login.
- Review firewall rules for obsolete ports and virtual servers.
- Rotate ICE secrets and administrative credentials when staff or infrastructure changes.
- Monitor disk space, service restarts, certificate expiry, bandwidth, and failed logins.
- Confirm that ordinary users still cannot access ICE or protected ACL operations.
Recommended final configuration
For most private communities, use the native mumble-server package, keep the default 64738 TCP and UDP port, use a DNS name with a matching certificate, bind ICE to localhost with strong secrets, and administer daily operations through named accounts and ACLs. Use Docker when its persistent-volume and image-lifecycle requirements fit your existing platform. In either case, validate the external network path, certificate renewal, permissions, backups, and restart persistence before treating the VPS as production-ready.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
