How we can help?

Home > Beginner Guides > Set firewall for direct media delivery

Set firewall for direct media delivery

Two specific policies must be put in place on your network's firewall to ensure you receive all audio on Flowroute calls:

  1.  SIP signaling (call control): Allow UDP and TCP traffic over port 5060[1] from the following server IP addresses:

    Point of Presence (PoP)        SIP Proxy IP Range
    ------ ------ UNITED STATES ------
    US-West-OR us-west-or.sip.flowroute.com 34.210.91.112/28
    US-East-VA us-east-va.sip.flowroute.com 34.226.36.32/28
    US-East-NJ (retiring in Aug 2022) us-east-nj.sip.flowroute.com 147.75.65.192/28
    ------ ------ ASIA PACIFIC ------
    AP-East-HK ap-east-hk.sip.flowroute.com

    before June 14 2022: 147.75.42.200/31

    starting June 14 2022: 16.163.86.112/30
    AP-Southeast-SIN ap-southeast-sin.sip.flowroute.com       3.0.5.12/30
    ------ ------ EMEA ------
    EU-West-LDN eu-west-ldn.sip.flowroute.com 3.8.37.20/30
    EU-West-AMS (retiring in June 2022) eu-west-ams.sip.flowroute.com 147.75.81.150/31
    EU-Central-FRA eu-central-fra.sip.flowroute.com 3.71.103.56/30
    ------ ------ LATAM ------
    SA-East-SP sa-east-sp.sip.flowroute.com 18.228.70.48/30

  2.  RTP media (call audio): To reduce latency, Flowroute uses Direct Media Delivery. To receive Direct Media, allow UDP packets from any source IP address with a destination port within your system's RTP public media port range.[2] 

Related Topics

NOTE:

[1] If your system has issues connecting over port 5060, you can use 5160 as an alternate SIP port. 

[2] RTP media port range varies by phone system. Your system's RTP media port range will be configured locally on your order and detailed in your system documentation.
Updated: