Network Matrix

This matrix summarizes the filtering rules and NAT rules required to ensure optimal Direct/UDP connections with Reemo in the Public Cloud environment.

It is divided into two sections: Reemo Agent Side (remote machine) and Browser Side (user workstation).

Reemo Agent Side

Filtering rules

Description	Transport	Source IP	Source Port	Destination IP	Destination Port	URL	Service	Proxy?
Signal	TCP	LAN	1024:65535	51.91.227.135 / 51.91.227.138	443	signal.reemo.io	HTTPS
Reemo Agent Update	TCP	LAN	1024:65535	87.98.136.60	443	download.reemo.io	HTTPS
TURN	TCP/UDP	LAN	1024:65535	146.59.228.143 / 51.15.241.42	443	turn1.reemo.io / turn2.reemo.io	ICE
REEMO	UDP	LAN	58200:58400	WAN [1]	1024:65535 [2]		REEMO

NAT rules

Description	Interface	Transport	Source IP	Source Port	Destination IP	Destination Port	NAT Address	NAT Port	Static Port
TURN [3]	WAN	UDP	LAN	1024:65535	146.59.228.143 / 51.15.241.42	443	WAN
REEMO [3]	WAN	UDP	LAN	58200:58400	WAN [1]	1024:65535 [2]	WAN

Note

[1] (1,2)

You can replace WAN with the IP address of your users.

[2] (1,2)

You can restrict the port range using the WebRtcUdpPortRange option in Chrome.

[3] (1,2)

Depending on the firewall, you may need to enable an option in the NAT rules to preserve source ports (static port / preserve source port).

Browser Side

Filtering rules

Description	Transport	Source IP	Source Port	Destination IP	Destination Port	URL	Service	Proxy?
Portal	TCP	LAN	1024:65535	51.91.227.135 / 51.91.227.138	443	portal.reemo.io	HTTPS
Signal	TCP	LAN	1024:65535	51.91.227.135 / 51.91.227.138	443	signal.reemo.io	HTTPS
WebClient	TCP	LAN	1024:65535	141.95.247.139 / 141.95.143.117	443	static.reemo.io	HTTPS
TURN	TCP/UDP	LAN	1024:65535	146.59.228.143 / 51.15.241.42	443	turn1.reemo.io / turn2.reemo.io	ICE
REEMO	UDP	LAN	1024:65535 [4]	WAN [5]	58200:58400 [6]		REEMO
Google reCAPTCHA [7]	TCP	LAN	1024:65535		443	www.gstatic.com/recaptcha	HTTPS
Google reCAPTCHA [7]	TCP	LAN	1024:65535		443	www.google.com/recaptcha	HTTPS
Stripe [7]	TCP	LAN	1024:65535		443	m.stripe.network	HTTPS

NAT rules

Description	Interface	Transport	Source IP	Source Port	Destination IP	Destination Port	NAT Address	NAT Port	Static Port
TURN [8]	WAN	UDP	LAN	1024:65535	146.59.228.143 / 51.15.241.42	443	WAN
REEMO [8]	WAN	UDP	LAN	1024:65535 [4]	WAN [5]	58200:58400 [6]	WAN

Note

[4] (1,2)

You can restrict the port range using the WebRtcUdpPortRange option in Chrome.

[5] (1,2)

You can replace WAN with the IP address of your Reemo Agent site.

[6] (1,2)

When traversing multiple network elements, the source port may be modified.

If the Direct/UDP connection does not work, try a wider range (1024:65535).

[7] (1,2,3)

Can be disabled in a Private Cloud environment.

[8] (1,2)

Depending on the firewall, you may need to enable an option in the NAT rules to preserve source ports (static port / preserve source port).