If you are on a work network or any network behind a firewall, you may need to speak with your IT department or network administrator to ensure you have the best setup to enjoy Swapcard. When you do, please give them the websites and IP addresses below to whitelist, and the ports to open.
Domains to allow
- *.swapcard.com (Event/Community App)
- *.tokbox.com (Video call/Roundtable)
- *.opentok.com (Video call/Roundtable)
- *.mux.com (Video delivery)
IP addresses to whitelist for inbound traffic to your organization
Swapcard infrastructure outbound IP addresses :
- 13.37.93.76
- 13.37.88.21
- 35.181.27.117
- 54.246.158.150
- 52.51.3.111
- 34.255.150.197
Dedicated email server outbound IP addresses :
- 161.38.206.33
- 141.193.33.237
- 161.38.205.104
- 185.250.238.18
IP addresses and ports to whitelist for outbound traffic from your organization to Swapcard
<aside> ⚠️ Domain whitelisting is strongly recommended, instead of IP’s whitelisting
</aside>
CDN’s IP address range :
https://api.fastly.com/public-ip-list
https://d7uri8nf7uskq.cloudfront.net/tools/list-cloudfront-ips
Ports
The Swapcard minimum requirement is that TCP port 443 is open. Some firewall/proxy rules only allow for SSL traffic over port 443. You will need to make sure that non-web traffic (TCP/UDP) can also pass over this port.
STUN is a network protocol used primarily for realtime voice/video and messaging, we recommend not to block STUN traffic over port 443.
In addition to the minimum requirements being met, we also recommend that UDP port 3478 is open. This port is used by a piece of hardware called [STUN server](https://www.3cx.com/pbx/what-is-a-stun-server/#:~:text=A STUN (Session Traversal of,outside of the local network.) that helps establish the connection between the participants in the call with a firewall in the middle.
For the best possible experience, we recommend that UDP ports 1025 - 65535 be open. Once these ports are open, there is no need for intermediary STUN/TURN servers which removes a hop from the media traffic.