NOTE: Network Firewall Rules updated for RemoteSpark Version 3.x

This article contains information for network teams to prepare their environment for deployment of RemoteSpark 3.x.

Glossary

Web Endpoint: is the API the RemoteSpark Client uses to interact with the system

Storage Endpoint: how the system uploads and downloads content

STUN/TURN: how video calls are established between the Expert and the remote worker

Note: Our cloud-based solution is hosted on Microsoft Azure. For more information on Azure services, see here.

Required Ports to Open

• 443 - (TCP)
• 3478 - (TCP/UDP)
• 8089 - (TCP/UDP)

Whitelisting Primary & Backup Endpoints via Wildcard

By using a wildcard to whitelist the domains below, all primary and backup endpoints will be taken care of, and no further action is needed.

*.kognitivspark.net  --> (primary endpoints)

If whitelisting is not possible, the exceptions below will need to be added.

STUN/TURN/JANUS Server

• Coturn3.kognitivspark.net on port 3478 and 8089 both TCP and UDP

DNS

• Public DNS resolution

RemoteSpark Endpoint

• cloud.kognitivspark.net/api/ on TCP port 443

CDN Endpoint

• cloudpreview.kognitivspark.net on TCP 443

Storage Endpoint

• storage3.kognitivspark.net on TCP port 443

Web Client (Browser Based)

• web.kognitivspark.net on TCP port 443

STUN/TURN Redundancies

In the unlikely event that our (Azure's) STUN/TURN servers go offline we have the following redundancies in place to ensure that there is no interruption in service. Please ensure that they're added to your firewall settings for good measure.

• global.turn.twilio.com
• stun.google.com

Options for not whitelisting all traffic

If you choose to select a specific data centre, depending on your network configuration you will need to allow traffic on Port 3478 (TCP/UDP), 8089(TCP/UDP).

If you don’t whitelist all traffic on those two ports, you will need to contact Kognitiv Spark Support to determine the correct IP addresses for those ports.