> ## Documentation Index
> Fetch the complete documentation index at: https://bigbluebutton.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Whitelisting BigBlueButton servers for the firewall

> BigBlueButton servers require specific ports to be accessible by the web browser in order to transfer audio and video media.

## BigBlueButton Servers

The web browser must be able to connect to the BigBlueButton server using the following ports and protocols for the best connection stability:

| Protocol | Port(s)     | Description                                                                                                                                                                                                                      |
| -------- | ----------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| TCP      | 443         | HTTPS<br />TURN over TLS<br /><abbr title="Application-Layer Protocol Negotiation, a TLS extension">ALPN</abbr><sup>[\[1\]](https://en.wikipedia.org/wiki/Application-Layer_Protocol_Negotiation)</sup>: `h2,http/1.1,stun.turn` |
| TCP, UDP | 3478        | STUN and TURN                                                                                                                                                                                                                    |
| TCP      | 5349        | TURN over TLS<br />ALPN: `stun.turn`                                                                                                                                                                                             |
| UDP      | 16384-32768 | WebRTC audio, video, and screen share media (encrypted using DTLS-SRTP)                                                                                                                                                          |

Blindside Networks uses dynamic servers for most of its BigBlueButton sessions.
The IP addresses used by the servers are allocated on-demand by our cloud hosting providers, and will change on a day-to-day basis.

If you need to limit outgoing firewall exceptions to apply only to BigBlueButton servers, we recommend using DNS suffix or wildcard matching.
The DNS hostnames used for BigBlueButton servers depend on the hosting region, and are as follows:

| Hosting Region    | Domain name suffix            |
| ----------------- | ----------------------------- |
| **Canada**        | \*.rna2.blindsidenetworks.com |
| **United States** | \*.rna1.blindsidenetworks.com |
| **Europe**        | \*.reu1.blindsidenetworks.com |
| **Asia Pacific**  | \*.roc2.blindsidenetworks.com |

## STUN/TURN Servers

To improve the success and speed of WebRTC media connections, Blindside Networks runs STUN/TURN servers.
If you are unable to allow the web browser to connect to the full range of UDP ports on the BigBlueButton server, ensure that the following ports are permitted for connections to the STUN/TURN servers:

| Protocol | Port(s) | Description                                                                                                                                                                                               |
| -------- | ------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| TCP      | 443     | TURN over TLS<br /><abbr title="Application-Layer Protocol Negotiation, a TLS extension">ALPN</abbr><sup>[\[1\]](https://en.wikipedia.org/wiki/Application-Layer_Protocol_Negotiation)</sup>: `stun.turn` |
| TCP, UDP | 3478    | STUN and TURN                                                                                                                                                                                             |
| TCP      | 5349    | TURN over TLS<br />ALPN: `stun.turn`                                                                                                                                                                      |

The STUN/TURN servers are configured on static IP addresses, listed below.
Please note that all of the STUN/TURN servers are global, and which server a given user will connect to depends on DNS geolocation and current network conditions.

| **Hostname**                           | **IP Addresses**                                                                                       |
| -------------------------------------- | ------------------------------------------------------------------------------------------------------ |
| turn4.reu1.turn.blindsidenetworks.com  | 206.189.242.91<br />134.209.83.176<br />2a03:b0c0:2:d0::f13:4001<br />2a03:b0c0:2:d0::f13:4002         |
| turn5.reu1.turn.blindsidenetworks.com  | 157.230.77.225<br />68.183.67.52<br />2a03:b0c0:3:d0::1328:f001<br />2a03:b0c0:3:d0::1328:f002         |
| turn6.rna1.turn.blindsidenetworks.com  | 165.227.252.138<br />157.230.177.241<br />2604:a880:400:d0::1ee1:9001<br />2604:a880:400:d0::1ee1:9002 |
| turn7.rna1.turn.blindsidenetworks.com  | 159.203.15.102<br />174.138.115.240<br />2604:a880:cad:d0::d91:a001<br />2604:a880:cad:d0::d91:a002    |
| turn8.rna1.turn.blindsidenetworks.com  | 45.55.124.139<br />142.93.190.81<br />2604:a880:800:c1::150:5001<br />2604:a880:800:c1::150:5002       |
| turn9.rna1.turn.blindsidenetworks.com  | 69.55.54.22<br />206.189.253.12<br />2604:a880:400:d0::17f1:d001<br />2604:a880:400:d0::17f1:d002      |
| turn10.roc2.turn.blindsidenetworks.com | 188.166.204.178<br />159.89.192.13<br />2400:6180:0:d1::5c:a001<br />2400:6180:0:d1::5c:a002           |
| turn11.roc2.turn.blindsidenetworks.com | 139.59.219.6<br />128.199.216.59<br />2400:6180:0:d0::5f:7001<br />2400:6180:0:d0::5f:7002             |
| turn12.reu1.turn.blindsidenetworks.com | 159.223.232.74<br />161.35.247.127<br />2a03:b0c0:2:d0::11ab:8001<br />2a03:b0c0:2:d0::11ab:8002       |