Kaltura firewall rules
To configure your network firewall, please see the following table. The following rules should be applied to outbound traffic.
The best practice is NOT to use IP addresses as these can change frequently in the cloud. Customers should create new whitelists using the list of Domains and ports as mentioned below.
US Region
| Service | Protocols Supported | IP Addresses | URLs |
|---|---|---|---|
| API | HTTPS (port 443) HTTP (port 80) | 192.58.252.0/23 | If using HTTPs (recommended): https://cdnapi-ev.kaltura.com If using HTTP: cdnapisec.kaltura.com |
| API: Messaging, connectors, User profile, app registry, authentication | HTTPS (port 443) | N/A | messaging.nvp1.ovp.kaltura.com connectors.nvp1.ovp.kaltura.com user.nvp1.ovp.kaltura.com app-registry.nvp1.kaltura.com auth.nvp1.ovp.kaltura.com sso.kaltura.com |
| KMC, KEA, Lecture Capture, Upload, Pubsub, Async, Event Platform, eCDN monitoring | HTTPS (port 443) HTTP (port 80) | 192.58.252.0/23 | kmc.kaltura.com push.kaltura.com upload.kaltura.com async-api.kaltura.com eventplatform.kaltura.com ecdn-monitor.kaltura.com www.kaltura.com crash-reports.kaltura.com |
| Chat and Collaboration | HTTPS (port 443) | N/A | chat.nvp1.ovp.kaltura.com |
| Mediaspace, KAF | HTTPS (port 443) HTTP (port 80) | 162.159.135.91 162.159.136.91 | *.mediaspace.kaltura.com kms-a.akamaihd.net |
| Live Ingress | RTMP (port 1935) RTMPS (port 443) SRT (port 7045) | 192.58.252.0/23 | RTMP/RTMPs: *.p.kpublish.kaltura.com *.b.kpublish.kaltura.com SRT: *.p.srt.publish.live.kaltura.com *.b.srt.publish.live.kaltura.com |
| VOD Playback | HTTPS (port 443) HTTP (port 80) | N/A | cfvod.kaltura.com |
| Live Playback | HTTPS (port 443) HTTP (port 80) | N/A | cflive.kaltura.com klive.kaltura.com |
| Analytics | HTTPS (port 443) HTTP (port 80) | N/A | analytics.kaltura.com |
Frankfurt Region
| Service | Protocols Supported | IP Addresses | URLs |
|---|---|---|---|
| API | HTTPS (port 443) | 3.77.207.224/27 | api.de.kaltura.com api.frp2.ovp.kaltura.com |
| API: Messaging, connectors, User profile, app registry, authentication | HTTPS (port 443) | N/A | messaging.frp2.ovp.kaltura.com connectors.frp2.ovp.kaltura.com user.frp2.ovp.kaltura.com app-registry.frp2.kaltura.com auth.frp2.ovp.kaltura.com sso.de.kaltura.com |
| KMC, KEA, Lecture Capture, Upload, Pubsub, Async, authentication, SSO, Event Platform | HTTPS (port 443) | 3.77.207.224/27 | kmc.frp2.ovp.kaltura.com kmc.de.kaltura.com push.frp2.ovp.kaltura.com upload.frp2.ovp.kaltura.com upload.de.kaltura.com async.frp2.ovp.kaltura.com eventplatform.frp2.ovp.kaltura.com eventplatform.de.kaltura.com ecdn-monitor.de.kaltura.com crash-reports.frp2.ovp.kaltura.com |
| Chat and Collaboration | HTTPS (port 443) | N/A | chat.frp2.ovp.kaltura.com |
| Mediaspace, KAF | HTTPS (port 443) | 162.159.135.91 162.159.136.91 | *.frp2.mediaspace.kaltura.com *.mediaspace.de.kaltura.com |
| Live Ingress | RTMP (port 1935) RTMPS (port 443) SRT (port 7045) | 3.78.137.192/27 | RTMP/RTMPs: *.p.rtmp.euc.publish.live.kaltura.com *.b.rtmp.euc.publish.live.kaltura.com SRT: *.p.srt.euc.publish.live.kaltura.com *.b.srt.euc.publish.live.kaltura.com |
| VOD Playback | HTTPS (port 443) | N/A | cfvod.frp2.ovp.kaltura.com |
| Live Playback | HTTPS (port 443) | N/A | cflive.frp2.ovp.kaltura.com |
| Analytics | HTTPS (port 443) | N/A | analytics.de.kaltura.com analytics.frp2.ovp.kaltura.com |
EMEA Region (Ireland)
| Service | Protocols Supported | IP Addresses | URLs |
|---|---|---|---|
| API | HTTPS (port 443) | 3.253.199.192/27 | api.eu.kaltura.com api.irp2.ovp.kaltura.com api.eu2.kaltura.com |
| API: Messaging, connectors, User profile, app registry, authentication | HTTPS (port 443) | N/A | messaging.irp2.ovp.kaltura.com connectors.irp2.ovp.kaltura.com user.irp2.ovp.kaltura.com app-registry.irp2.kaltura.com auth.irp2.ovp.kaltura.com sso.eu.kaltura.com sso.eu2.kaltura.com |
| KMC, KEA, Lecture Capture, Upload, Pubsub, Async, authentication, SSO, Event Platform | HTTPS (port 443) | 3.253.199.192/27 | kmc.irp2.ovp.kaltura.com kmc.eu2.kaltura.com push.irp2.ovp.kaltura.com upload.irp2.ovp.kaltura.com upload.eu2.kaltura.com async.irp2.ovp.kaltura.com eventplatform.irp2.ovp.kaltura.com eventplatform.eu2.kaltura.com ecdn-monitor.eu.kaltura.com crash-reports.irp2.ovp.kaltura.com |
| Chat and Collaboration | HTTPS (port 443) | N/A | chat.irp2.ovp.kaltura.com |
| Mediaspace, KAF | HTTPS (port 443) | 162.159.135.91 162.159.136.91 | *.mediaspace.eu.kaltura.com *.mediaspace.eu2.kaltura.com |
| Live Ingress | RTMP (port 1935) RTMPS (port 443) SRT (port 7045) | 3.78.137.192/27 | RTMP/RTMPs: *.p.rtmp.euc.publish.live.kaltura.com *.b.rtmp.euc.publish.live.kaltura.com SRT: *.p.srt.euc.publish.live.kaltura.com *.b.srt.euc.publish.live.kaltura.com |
| VOD Playback | HTTPS (port 443) | N/A | cfvod.irp2.ovp.kaltura.com |
| Live Playback | HTTPS (port 443) | N/A | cflive.irp2.ovp.kaltura.com |
| Analytics | HTTPS (port 443) | N/A | analytics.eu2.kaltura.com analytics.irp2.ovp.kaltura.com |
Singapore Region
| Service | Protocols Supported | IP Addresses | URLs |
|---|---|---|---|
API | HTTPS (port 443) | 18.143.252.96/27 | api.sg.kaltura.com |
KMC, KEA, Lecture Capture, Upload, Pubsub, Async, authentication, SSO, Event Platform | HTTPS (port 443) | 18.143.252.96/27 | |
Mediaspace, KAF | HTTPS (port 443) | 162.159.136.91/32 | *.sgp2.mediaspace.kaltura.com |
Live Ingress | RTMP (port 1935) | 18.143.252.96/27 | RTMP/RTMPs:
|
VOD Playback | HTTPS (port 443) | N/A | cfvod.sgp2.ovp.kaltura.com |
Live Playback | HTTPS (port 443) | N/A | |
Analytics | HTTPS (port 443) | N/A |
Canada Region
| Service | Protocols Supported | IP Addresses | URLs |
|---|---|---|---|
API | HTTPS (port 443) | 18.99.0.144/28 | api.ca.kaltura.com |
KMC, KEA, Lecture Capture, Upload, Pubsub, Async, authentication, SSO, Event Platform | HTTPS (port 443) | 18.99.0.144/28 | |
Mediaspace, KAF | HTTPS (port 443) | 162.159.136.91/32 | *.cap2.mediaspace.kaltura.com |
Live Ingress | RTMP (port 1935) | 18.99.0.144/28 | RTMP/RTMPs:
|
VOD Playback | HTTPS (port 443) | N/A | cfvod.cap2.ovp.kaltura.com |
Live Playback | HTTPS (port 443) | N/A | |
Analytics | HTTPS (port 443) | N/A |
APAC Region (Australia)
| Service | Protocols Supported | IP Addresses | URLs |
|---|---|---|---|
API | HTTPS (port 443) | 3.27.166.160/27 | api.ap.kaltura.com |
KMC, KEA, Lecture Capture, Upload, Pubsub, Async, authentication, SSO, Event Platform | HTTPS (port 443) | 3.27.166.160/27 | |
Mediaspace, KAF | HTTPS (port 443) | 162.159.136.91/32 | *.syp2.mediaspace.kaltura.com |
Live Ingress | RTMP (port 1935) | 3.27.166.160/27 | RTMP/RTMPs:
|
VOD Playback | HTTPS (port 443) | N/A | cfvod.syp2.ovp.kaltura.com |
Live Playback | HTTPS (port 443) | N/A | |
Analytics | HTTPS (port 443) | N/A |
