Configure firewalls, proxies and corporate networks so users can reach KUDO meetings, audio, video, captions, AI translation and interpretation.
This guide is for IT administrators and network and security teams.
KUDO uses secure web technologies and real-time communication services to deliver multilingual meetings, AI translation, captions, audio and video. If users connect from a corporate, government, educational or other restricted network, firewall or proxy settings may block parts of the KUDO platform. This guide lists the domains, ports and IP ranges to allow.
Signs of a firewall or network restriction
Users affected by firewall or proxy restrictions may see:
- Meetings that won’t join
- Loading screens that never finish
- Missing audio or video
- Interpretation channels that don’t load
- The KUDO panel not appearing in Microsoft Teams
- Frequent disconnects or reconnects
- Captions or AI translation failing to start
- Webcam or microphone connection failures
- The KUDO Widget or Mobile Link not loading properly
If the page and captions load but there’s no audio, first check whether UDP traffic is being blocked or filtered.
Domains
Depending on your firewall or endpoint security settings, you may need to allow these domains:
-
*.kudoway.comfor accounts in the USA or Asia-Pacific region -
*.kudoway.eufor accounts in the Europe region -
*.kudoway.cafor accounts in the Canada region *.tokbox.com*.opentok.com
If your firewall or policy doesn’t allow wildcard domains, allow these subdomains for your account’s region instead.
| Region | Subdomains |
|---|---|
| USA |
https://live.kudoway.com, https://api.kudoway.com, https://session-console.kudoway.com
|
| Europe |
https://live.kudoway.eu, https://api.kudoway.eu, https://session-console.kudoway.eu
|
| Canada |
https://live.kudoway.ca, https://api.kudoway.ca, https://session-console.kudoway.ca
|
| Asia-Pacific | https://asia.kudoway.com |
Ports
All media traffic (audio and video) goes through STUN servers. All traffic is bidirectional.
| Port | Status | Notes |
|---|---|---|
| TCP 443 | Required | Used for all KUDO traffic, and for media if UDP is blocked |
| UDP 3478 | Recommended | UDP’s low overhead gives better audio and video quality in most cases |
Also allow outbound UDP for media traffic. Don’t block or throttle UDP. If UDP is blocked, KUDO sends media over TCP 443 (SSL) instead, at lower quality.
Proxies
If your network can reach the internet only through a proxy, the proxy must either be transparent or be configured in the browser for HTTPS connections. KUDO doesn’t support proxies that require authentication.
Firewall behavior
Some firewalls and endpoint security tools use stateful packet inspection or flood control. These features can deprioritize or throttle media streams, which lowers quality or, in some cases, blocks the stream. Users may notice audio or video problems after a short period of use. If this happens, contact your organization’s IT security team.
At large events, stateful inspection or flood control can degrade streams for many attendees at once. Check firewall and NAT session capacity against the expected number of devices.
Attendee networks at onsite events
On the network attendees use to follow KUDO at an onsite event:
- Don’t use a captive portal.
- Don’t set per-device bandwidth limits.
- Don’t filter UDP traffic.
For Wi-Fi capacity and sizing, see Set up KUDO translation for an onsite event.
Microsoft Teams
If you use KUDO with Microsoft Teams, all the requirements above apply. Also allow these subdomains and ports:
https://teams-bot.kudoway.comhttps://teams-web.kudoway.com- TCP port 8445
- TCP port 9444
IP ranges
KUDO uses dynamic IP addresses and elastic load balancing, so we can’t guarantee the exact IP addresses your meetings will use. We can provide ranges instead. We change these ranges periodically for technical and security reasons.
If your organization allows these ranges, ask KUDO Support to add you to the mailing list for range updates. We notify customers three weeks before a change.
IP version support
KUDO supports IPv4.
Ranges to allow
Depending on your firewall settings and policies, you may need to allow two sets of addresses: the server for your account’s region, and KUDO Media Services.
These ranges were updated on March 2022.
| Region server | IP addresses | Required when |
|---|---|---|
| USA | 44.194.123.245, 54.183.2.235 | Your account is in the USA region |
| Europe | 3.125.64.235, 34.247.171.240 | Your account is in the Europe region |
| Canada | 3.97.146.187 | Your account is in the Canada region |
| Asia-Pacific | 47.52.44.158, 47.52.109.58 | Your account is in the Asia-Pacific region |
KUDO Media Services (required for all accounts):
3.123.12.128/28 3.127.48.224/28 3.214.145.96/27 3.234.232.160/27 3.234.248.80/28 3.235.255.176/28 3.248.234.48/28 3.248.243.144/28 3.248.244.96/27 3.25.48.192/28 3.38.113.0/24 3.38.114.0/24 3.38.91.128/25 3.7.161.0/26 3.7.161.48/28 13.251.158.0/28 15.228.1.16/28 18.139.118.176/28 18.141.165.128/27 18.156.18.0/27 18.157.71.112/28 18.179.48.208/28 18.180.159.224/27 18.202.216.0/28 34.218.216.144/28 34.222.66.96/28 34.223.51.192/27 34.223.51.224/27 35.158.127.224/28 44.232.236.96/27 44.234.90.64/28 52.200.60.16/28 52.213.63.176/28 52.41.63.240/28 52.51.63.16/28 52.65.127.192/27 52.66.255.192/27 54.233.127.224/29 54.250.250.208/28 54.69.125.241/32 54.89.253.64/28 99.79.160.16/28 99.80.88.240/28 168.100.64.0/18