I'm using 3377 (D-E-R-P) since it's effectively replacing the DERP servers on the specified source devices.