Firewall requirements

To allow you to use Agora products in environments with restricted network access, Agora provides the following solutions: the firewall whitelist and the Agora cloud proxy.

The following table lists the support of Agora products for the two solutions:

Agora Products	Firewall Whitelist	Agora Cloud Proxy
Video SDK (Native, third-party frameworks)	✘	✔
Video SDK (Web)	✔	✔
Signalling SDK (Native)	✔	✘
Signalling SDK (Web)	✔	✔
On-Premise Recording SDK	✘	✔
Interactive Gaming SDK	✘	✘

• When using the firewall whitelist, add the domains and ports to the firewall whitelist, and do not set restrictions on IP addresses.
• When using Agora cloud proxy, refer to Connect to Agora through a restricted network

Add the following destination domains and the corresponding ports to your firewall whitelist.

_4

.agora.io

_4

.edge.agora.io

_4

.sd-rtn.com

_4

.edge.sd-rtn.com

Destination ports	Port type	Operation
80; 443; 3433; 4700 - 5000; 5668; 5669; 6080; 6443; 8667; 9667; 30011 - 30013 (for RTMP converter)	TCP	Allow
3478; 4700 - 5000 (2.9.0 or later); 10000 - 65535 (before 2.9.0)	UDP	Allow

For a message channel, you need to add the following content to the firewall whitelist:

• Domains:

  
  

  _14

  .edge.agora.io

  _14

  .edge.sd-rtn.com

  _14

  web-1.ap.sd-rtn.com

  _14

  web-2.ap.sd-rtn.com

  _14

  web-3.ap.sd-rtn.com

  _14

  web-4.ap.sd-rtn.com

  _14

  ap-web-1.agora.io

  _14

  ap-web-2.agora.io

  _14

  ap-web-3.agora.io

  _14

  ap-web-4.agora.io

  _14

  webcollector-rtm.agora.io

  _14

  logservice-rtm.agora.io

  _14

  rtm.statscollector.sd-rtn.com

  _14

  rtm.logservice.sd-rtn.com

  
  

• Ports:

  Destination port	Protocol	Operate
  443; 9591; 9593; 27387	TCP	Allow

  Info

  If you are using Signaling 1.x, also add port 9601.

For a stream channel, you need to add the following to your firewall whitelist:

• Domains:

  
  

  _4

  .agora.io

  _4

  .edge.agora.i0

  _4

  .sd-rtn.com

  _4

  .edge.sd-rtn.com

  
  

• Ports:

  Destination port	Protocol	Operate
  80; 3433; 4700 - 5000; 5668; 5669; 6080; 6443; 8667; 9667	TCP	Allow
  3478; 4700 - 5000	UDP	Allow

For a message channel, you need to add the following content to the firewall whitelist:

• Domains:
  
  

  _1

  .agora.io

  
  
• Ports:

  Destination port	Protocol	Operate
  443; 7384; 8443; 9130; 9131; 9136; 9137; 9140; 9141	TCP	Allow
  1080; 3000; 8000; 8130; 8443; 9120; 9121; 9700; 25000	UDP	Allow

For a stream channel, you need to add the following to your firewall whitelist:

• Ports:

  Destination port	Protocol	Operate
  4001 - 4150	UDP	Allow

Info

The target ports listed in this section may be adjusted according to actual conditions. If you encounter any issues, contact rtm@agora.io.