Whitelisting JaaS: IP ranges and domains

In order to function properly, the 8x8 Meet and Jitsi as a Service clients require access to certain domains and IP addresses. If your users have strict firewall rules, you should make sure that they whitelist the following domains and IP ranges.

Domains

This is the list of domains that 8x8 Meet and Jitsi as a Service clients will attempt to access during their normal operation. They should be whitelisted for HTTPS (TCP port 443). Separated by category, they are:

Core Operation

It is absolutely necessary that these domains are added to HTTPS (TCP port 443) whitelists. Users will be unable to use the meetings products if they are not.

• https://8x8.com
• https://*.8x8.com
• https://8x8.vc
• https://*.8x8.vc
• https://jitsi.net
• https://*.jitsi.net

Auxiliary Functionality

Inability to access domains on this list will disrupt some features in the product, but users should still be able to conduct basic meetings.

• https://www.gravatar.com
• https://*.callstats.io
• https://*.youtube.com
• https://*.dropboxapi.com
• https://*.dropboxstatic.com
• https://*.dropbox.com
• https://*.dropboxusercontent.com
• https://dropboxcaptcha.com
• https://*.microsoft.com
• https://*.microsoftonline.com
• https://*.msauth.net
• https://*.live.com
• https://*.microsoftonline-p.com

Analytics

The following domains are used by tools that help us analyze user activity, improve the Meet products, and debug user problems. Inability to access these domains will result in no perceptible changes to end users, but it will hamper our ability to diagnose issues and improve the product.

• https://api.amplitude.com
• https://www.google-analytics.com
• https://*.gstatic.com
• https://*.googleapis.com
• https://*.google.com
• https://*.googleusercontent.com

IP Addresses

To provide core service, we also require full IP connectivity (TCP and UDP) to the following IP blocks and port ranges.

Video Bridges

JVB video bridges require TCP port 443 and UDP port 10000:

• Australia (Sydney): 168.138.111.128/25
• Brazil (São Paulo): 168.138.245.0/25, 129.148.18.0/26, 129.148.18.64/26
• Germany (Frankfurt): 130.61.162.0/24
• India (Mumbai): 152.67.21.0/24
• Japan (Tokyo): 155.248.191.0/24
• USA East (Ashburn): 193.122.184.0/24
• USA West (Phoenix): 158.101.40.0/25, 129.146.204.128/27, 129.146.205.0/27, 129.146.205.96/27, 129.146.206.64/27
• UK (London): 152.67.144.0/24

TURN Relay Servers

TURN servers require TCP port 443, UDP port 443 and UDP ports 49152-65535.

• Australia (Sydney): 168.138.110.244, 168.138.110.59
• Brazil (São Paulo): 168.138.236.29, 168.138.229.53
• Canada (Toronto): 140.238.148.121, 140.238.148.27
• Germany (Frankfurt): 130.61.64.185, 193.122.11.14
• India (Mumbai): 152.67.14.48, 152.67.30.22
• Japan (Tokyo): 168.138.216.49, 168.138.223.155
• Netherlands (Amsterdam): 158.101.192.6, 193.123.38.193
• Saudi Arabia (Jeddah): 193.122.64.56, 158.101.224.215
• UK (London): 140.238.95.196, 152.67.128.56
• USA East (Ashburn): 193.122.177.113, 193.122.167.175
• USA West (Phoenix): 129.146.227.2, 129.146.219.44

Jitsi as a Service Webhook Origins

Webhook responses will come on TCP from these IPs:

• 52.26.201.32
• 52.10.206.157
• 35.162.88.192

Copy/Paste

For ease of use, here are all IPs and ranges for copy-paste:

168.138.111.128/25
168.138.245.0/25
129.148.18.0/26
129.148.18.64/26
130.61.162.0/24
152.67.21.0/24
155.248.191.0/24
193.122.184.0/24
158.101.40.0/25
129.146.204.128/27
129.146.205.0/27
129.146.205.96/27
129.146.206.64/27
152.67.144.0/24
168.138.110.244
168.138.110.59
168.138.236.29
168.138.229.53
140.238.148.121
140.238.148.27
130.61.64.185
193.122.11.14
152.67.14.48
152.67.30.22
168.138.216.49
168.138.223.155
158.101.192.6
193.123.38.193
193.122.64.56
158.101.224.215
140.238.95.196
152.67.128.56
193.122.177.113
193.122.167.175
129.146.227.2
129.146.219.44
52.26.201.32
52.10.206.157
35.162.88.192