Skip to main content

What are the network connectivity requirements for Swapcard?

This article outlines the domains, IP addresses, and ports your IT team should allow to ensure Swapcard functions without issues.

To ensure the best experience using Swapcard—especially for features like live video, Roundtables, and messaging—you may need to adjust your network settings. This is especially important if you're accessing Swapcard from a restricted network, such as a corporate firewall.


Which domains should be whitelisted?

These domains must be accessible for the app and media features to work correctly:

  • *.swapcard.com (Main platform access)

  • *.tokbox.com (Personal video calls and Roundtables)

  • *.opentok.com (Personal video calls and Roundtables)

  • *.mux.com (Video content delivery)

  • *.100ms.live (Used for Backstage)

Tip: Domain-based whitelisting is strongly recommended over IP whitelisting to reduce future maintenance.


Which IP addresses should be whitelisted?

These IPs may be needed for environments with strict firewall rules:

Swapcard infrastructure outbound IPs:

  • 13.37.93.76

  • 13.37.88.21

  • 35.181.27.117

  • 54.246.158.150

  • 52.51.3.111

  • 34.255.150.197

Email server IPs:

  • 161.38.206.33

  • 141.193.33.237

  • 161.38.205.104

  • 185.250.238.18

For environments with strict firewall rules where domain whitelisting isn't possible, the following 100ms TURN server IPs should be allowed

  • 35.207.178.162/32

  • 35.207.130.81/32

  • 35.207.168.133/32

  • 35.211.150.95/32

  • 35.211.73.217/32

  • 35.211.191.127/32

  • 35.207.224.32/32

  • 35.207.222.110/32

  • 35.207.209.133/32

  • 35.244.46.211/32

  • 34.74.251.112/32

  • 34.169.128.194/32

  • 34.105.5.246/32

  • 34.169.40.88/32

  • 34.141.73.51/32


What CDN IP ranges need to be allowed?

Swapcard uses third-party CDN services for content delivery. You may need to allow the following IP ranges:


Which ports should be open for Swapcard to work?

For full functionality, these ports must be open:

Required

  • TCP port 443: Must be open for HTTPS and secure real-time services

    • ⚠️ Ensure non-web traffic (e.g., UDP/TCP signaling) can also pass through this port

  • UDP port 3478: Recommended for STUN traffic used in video calls

Recommended for best experience (especially Backstage)

  • TCP 3478 — Additional TURN/TLS path used by 100ms

  • UDP 443, 3478 — TURN/UDP and ICE negotiation

  • UDP 41000–65535 — Media traffic for 100ms (Backstage)

  • UDP 1025–65535 — Optimal media performance for TokBox-based sessions, reducing reliance on TURN servers

Blocking any of the above may prevent Swapcard's video, messaging, Backstage, or other real-time features from working correctly.


Blocking any of the above may prevent Swapcard’s video, messaging, or real-time features from working correctly. By ensuring these network rules are in place, your users can enjoy seamless interaction across all devices and session types.

Did this answer your question?