Skip to main content

Security settings

Settings for corporate network

If you are unable to connect to external services because your private or corporate network has restrictions, you can ask the IT department to add the following addresses to the allow list. If you encounter any issues, please don't hesitate to reach out to for assistance.

On this page and the pages linked to it, we have provided a comprehensive list of hosts, IP addresses, and ports used by SpatialChat and our providers to ensure a complete SpatialChat experience.

This does not necessarily mean that you need to add all of these to your allow list. Instead, you should add them to the allow list as needed based on any issues you may be experiencing. For example:

  • If you are unable to access the website at all, you may want to start by adding AWS to the allow list.
  • If you are having trouble with SpatialRooms, try adding Twilio Video and LiveKit to the allow list.
  • If you are experiencing issues with Stage, consider adding Agora to the allow list.
Note that some rules may need to be set based on the host, as the IP addresses may be dynamic.

List of hosts, IP addresses, and ports

AWS Ireland region

Twilio Video

Our recommendation would also be to allow the domains * and *

In case needed, our cloud vendor is Oracle Cloud.

IP ranges of Oracle Cloud:

Firewall settings to Agora service


TCP (allow) - 80; 443; 3433; 4700 - 5000; 5668; 5669; 6080; 6443; 8667; 9667; 30011 - 30013 (for RTMP converter)

UDP (allow) - 3478; 4700 - 5000

For Agora cloud proxy support (TCP fallback) use the following settings:

Firewall settings to LiveKit service:

* TCP: 443
* TCP: 443
all hosts (optional) UDP: 3478
all hosts (optional) UDP: 50000-60000

Additionally, please ensure UDP hole-punching is enabled (or disable symmetric NAT). This helps machines behind the firewall to establish a direct connection to a LiveKit Cloud media server.

If wildcard hostnames are not allowed by your firewall or security policy, the following are the mimimum set of hostnames required to connect to LiveKit Cloud:

The list of domains is subject to change.