Network Matrix (Private Cloud)

This matrix summarizes the filtering rules and NAT rules required to ensure optimal Direct/UDP connections with Reemo in a custom Private Cloud environment.

It is divided into two sections: Reemo Agent Side (remote machine) and Browser Side (user workstation).

Important

If you use Reemo on our Public Cloud, please refer to the Public Cloud Matrix instead. See Network Matrix (Public Cloud)

Reemo Agent Side

Filtering rules

Description	Transport	Source IP	Source Port	Destination IP	Destination Port	URL	Service	Proxy?
Reemo Agent Updater	TCP	LAN	1024:65535	87.98.136.60	443	download.reemo.io	HTTPS
Signal	TCP	LAN	1024:65535	Custom	8443	<CLIENT_NAME>-signal.cloud.reemo.io	HTTPS
TURN	TCP/UDP	LAN	1024:65535	146.59.228.143 51.15.241.42	443	turn1.reemo.io turn2.reemo.io	ICE
REEMO	UDP	LAN	58200:58400	WAN [1]	1024:65535 [2]		REEMO

NAT rules

Description	Interface	Transport	Source IP	Source Port	Destination IP	Destination Port	NAT Address	NAT Port	Static Port
TURN [3]	WAN	UDP	LAN	1024:65535	146.59.228.143 51.15.241.42	443	WAN	*
REEMO [3]	WAN	UDP	LAN	58200:58400	WAN [1]	1024:65535 [2]	WAN	*

Note

[1] (1,2)

You can replace WAN with the IP address of your users.

[2] (1,2)

You can restrict the port range using the WebRtcUdpPortRange option in Chrome.

[3] (1,2)

Depending on the firewall, you may need to enable an option in the NAT rules to preserve source ports (static port / preserve source port).

Browser Side

Filtering rules

Description	Transport	Source IP	Source Port	Destination IP	Destination Port	URL	Service	Proxy?
Portal	TCP	LAN	1024:65535	Custom	443	<CLIENT_NAME>.cloud.reemo.io	HTTPS
Signal	TCP	LAN	1024:65535	Custom	8443	<CLIENT_NAME>-signal.cloud.reemo.io	HTTPS
WebClient	TCP	LAN	1024:65535	141.95.247.139 141.95.143.117	443	static.reemo.io	HTTPS
TURN	TCP/UDP	LAN	1024:65535	146.59.228.143 51.15.241.42	443	turn1.reemo.io turn2.reemo.io	ICE
REEMO	UDP	LAN	1024:65535 [4]	WAN [5]	58200:58400 [6]		REEMO

NAT rules

Description	Interface	Transport	Source IP	Source Port	Destination IP	Destination Port	NAT Address	NAT Port	Static Port
TURN [7]	WAN	UDP	LAN	1024:65535	146.59.228.143 51.15.241.42	443	WAN	*
REEMO [7]	WAN	UDP	LAN	1024:65535 [4]	WAN [5]	58200:58400 [6]	WAN	*

Note

[4] (1,2)

You can restrict the port range using the WebRtcUdpPortRange option in Chrome.

[5] (1,2)

You can replace WAN with the IP address of your Reemo Agent site.

[6] (1,2)

When traversing multiple network elements, the source port may be modified.

If the Direct/UDP connection does not work, try a wider range (1024:65535).

[7] (1,2)

Depending on the firewall, you may need to enable an option in the NAT rules to preserve source ports (static port / preserve source port).