Matrix - CLOUD Public

Reemo Agent Side

../_images/firewall_reemoside.png

Filtering rules

DESCRIPTION

TRANSPORT

SOURCE IP

SOURCE PORT

DESTINATION IP

DESTINATION PORT

URL

SERVICES

Can use a Proxy

Signal

TCP

LAN

1024:65535

51.91.227.135 / 51.91.227.138

443

signal.reemo.io

HTTPS

Reemo Agent Update

TCP

LAN

1024:65535

87.98.136.60

443

download.reemo.io

HTTPS

TURN

TCP/UDP

LAN

1024:65535

146.59.228.143 / 51.15.241.42

443

turn1.reemo.io / turn2.reemo.io

ICE

REEMO

UDP

LAN

58200:58400

WAN*

1024:65535**

REEMO

NAT rules

DESCRIPTION

INTERFACE

TRANSPORT

SOURCE IP

SOURCE PORT

DESTINATION IP

DESTINATION PORT

NAT ADDRESS

NAT PORT

STATIC PORT

TURN***

WAN

UDP

LAN

1024:65535

146.59.228.143 / 51.15.241.42

443

WAN

REEMO***

WAN

UDP

LAN

58200:58400

WAN*

1024:65535**

WAN

Warning

* You can replace WAN with the IP address of your users

** You can restrict the port range by using the WebRtcUdpPortRange option in Chrome

*** Depending on your firewall, you must activate an option in the NAT rules to not modify the source ports

Browser Side

../_images/firewall_browserside.png

Filtering rules

DESCRIPTION

TRANSPORT

SOURCE IP

SOURCE PORT

DESTINATION IP

DESTINATION PORT

URL

SERVICES

Can use a Proxy

Portal

TCP

LAN

1024:65535

51.91.227.135 / 51.91.227.138

443

portal.reemo.io

HTTPS

Signal

TCP

LAN

1024:65535

51.91.227.135 / 51.91.227.138

443

signal.reemo.io

HTTPS

WebClient

TCP

LAN

1024:65535

141.95.247.139 / 141.95.143.117

443

static.reemo.io

HTTPS

TURN

TCP/UDP

LAN

1024:65535

146.59.228.143 / 51.15.241.42

443

turn1.reemo.io / turn2.reemo.io

ICE

REEMO

UDP

LAN

1024:65535*

WAN**

58200:58400***

REEMO

Google Recaptcha *****

TCP

LAN

1024:65535

443

www.gstatic.com/recaptcha

HTTPS

Google Recaptcha *****

TCP

LAN

1024:65535

443

www.google.com/recaptcha

HTTPS

Stripe *****

TCP

LAN

1024:65535

443

m.stripe.network

HTTPS

NAT rules

DESCRIPTION

INTERFACE

TRANSPORT

SOURCE IP

SOURCE PORT

DESTINATION IP

DESTINATION PORT

NAT ADDRESS

NAT PORT

STATIC PORT

TURN****

WAN

UDP

LAN

1024:65535

146.59.228.143 / 51.15.241.42

443

WAN

REEMO****

WAN

UDP

LAN

1024:65535**

WAN*

58200:58400***

WAN

Warning

* You can restrict the port range by using the WebRtcUdpPortRange option in Chrome

** You can replace WAN with the IP address of your Reemo Agent Site

*** By passing through several network elements, the source port can be modified. If Direct/UDP connection does not work, try a larger range 1024:65535

**** Depending on your firewall, you must activate an option in the NAT rules to not modify the source ports

***** Can be disabled in Private Cloud environment