Talk:Network Requirements - Revision history

IVSWikiBlue at 17:58, 18 February 2026

2026-02-18T17:58:42Z

IVSWikiBlue at 17:57, 18 February 2026

2026-02-18T17:57:45Z

IVSWikiBlue at 18:28, 17 February 2026

2026-02-17T18:28:36Z

IVSWikiBlue at 18:26, 17 February 2026

2026-02-17T18:26:50Z

IVSWikiBlue: Created page with "{{Article - Manual | content =

Introduction

{{Manual lvl 2 | title = Architecture and Terms | content = Our software is built on the standard LEMP (Linux, Nginx..."
2026-02-17T18:21:42Z

Created page with "{{Article - Manual | content = <h1>Introduction</h1> {{Manual lvl 2 | title = Architecture and Terms | content = Our software is built on the standard LEMP <em>(Linux, Nginx..."

New page
{{Article - Manual | content =
<h1>Introduction</h1>
{{Manual lvl 2 | title = Architecture and Terms | content =
Our software is built on the standard LEMP <em>(Linux, Nginx, MYSQL, and PHP)</em> architecture. The software has been designed to work on the latest LTS version of Ubuntu Linux. For networking purposes, there are 2 main components to the software application:
{{hr}}
<dl>
<dt>Application Server:</dt>
<dd>
This makes up the bulk of the application and consists of 3 primary components:
<ol>
<li><strong>PHP</strong> web pages being served up by the Nginx web server</li>
<li><strong>MySQL</strong> Database</li>
<li><strong>NodeJS</strong> messaging and control service</li>
</ol></dd>

{{hr - 2}}

<dt>Media Server:</dt>
<dd>This portion of the application handles <u>all the communication with the cameras and video streams</u> being served out to the client PCs. It also handles all the recording and clip creation.</dd>
</dl>

{{Aside - Helpful | content = From a physical or virtual server perspective, the <b>entire server side software stack can be run on a single server</b>.}}

{{hr - 2}}

For applications requiring <b>more than 50 cameras</b> or consisting of different departments the software can be broken out and additional Media Servers can be added.

<center>{{img - no_click | file = VALT Server Structure.png}}</center>
}}

{{Top of Page}}
{{hr}}

<h1>Basic Configuration</h1>
<table style="border-collapse: collapse;border: 1px solid black; margin-bottom: 20px; text-align: center; width: 200px; float: right">
<tr>
<th style="background-color:#282829; font-weight: bold; color: white">Key</th>
</tr>
<tr>
<td>Always Required</td>
</tr>
<tr>
<td style="background-color:#FFEBE5">🔓 SSL is Disabled</td>
</tr>
<tr>
<td style="background-color:#E5FFEB">🔒 SSL is Enabled</td>
</tr>
<tr>
<td style="background-color:#e5ecff">🔧 For Administration</td>
</tr>
</table>

{{Manual lvl 2 | title = Client to Application & Media Server(s) | content =
This table shows the ports that must be opened for client machines to speak to the VALT <b>Application</b> and <b>Media</b> servers. Use the key to understand when certain ports apply.

{{hr - 2}}

<table class="network_ports_table">
<tr>
<th>Port</th>
<th>Protocol</th>
<th>Service</th>
<th>Source</th>
<th>Destination</th>
</tr>
<tr class="help" title="Required only when SSL is Disabled" style="background-color:#FFEBE5">
<td>🔓 TCP 80</td>
<td>HTTP</td>
<td>Web Application</td>
<td>Client</td>
<td>Application Server</td>
</tr>
<tr class="help" title="Required only when SSL is Disabled" style="background-color:#EFDBD5">
<td>🔓 TCP 1935</td>
<td>WS</td>
<td>Video Streaming</td>
<td>Client</td>
<td>Application & Media Server</td>
</tr>
<tr class="help" title="Required only when SSL is Enabled" style="background-color:#E5FFEB">
<td>🔒 TCP 443</td>
<td>HTTPS</td>
<td>Web Application</td>
<td>Client</td>
<td>Application Server</td>
</tr>
<tr class="help" title="Required only when SSL is Enabled" style="background-color:#D5EFDB">
<td>🔒 TCP 444</td>
<td>WSS</td>
<td>Video Streaming</td>
<td>Client</td>
<td>Application & Media Server</td>
</tr>
<tr>
<td>TCP 8000</td>
<td title="Changes with SSL status (Enabled/Disabled).">HTTP/HTTPS*</td>
<td>Downloads/Wowza webserver</td>
<td>Client</td>
<td>Application & Media Server</td>
</tr>
<tr>
<th colspan=6>For Administration</th>
</tr>
<tr class="help" title="Required only for Administration" style="background-color:#e5ecff">
<td>🔧 TCP 22</td>
<td>SSH</td>
<td>SSH</td>
<td>Client</td>
<td>Application & Media Server</td>
</tr>
<tr class="help" title="Required only for Administration" style="background-color:#d5dcef">
<td>🔧 TCP 8088</td>
<td>HTTP</td>
<td>Wowza admin</td>
<td>Client</td>
<td>Application & Media Server</td>
</tr>
</table>
}}

{{Top of Page}}
{{hr}}

{{Manual lvl 2 | title = Media Server(s) to Video Device(s) | content =
This table shows the ports that must be opened for the [[VALT_Devices|video devices]] to communicate with VALT. Video devices refers to hardware such as:
*[[VALT_Devices#PTZ_Cameras|Cameras]]
*[[VALT_Devices#Encoders|Encoders]]

{{hr - 2}}

<table class="network_ports_table">
<tr>
<th>Port</th>
<th>Protocol</th>
<th>Service</th>
<th>Source</th>
<th>Destination</th>
</tr>
<tr>
<td>TCP 80</td>
<td>HTTP</td>
<td>Web Application/API</td>
<td>Media Server</td>
<td>Camera</td>
</tr>
<tr>
<td>TCP 554</td>
<td>RTSP</td>
<td>Video Stream</td>
<td>Media Server</td>
<td>Camera</td>
</tr>
</table>
}}

{{Top of Page}}
{{hr}}

<h1>Other Configurations</h1>
{{Manual lvl 2 | title = BEAM (Mobile Application) | content =
{{Aside | content = Only required for those who have purchased [[BEAM Main Page|BEAM]] licenses.}}

BEAM is an application that allows users to leverage devices, such as iPads and iPhones, as a mobile video endpoint. This includes the following features:
<table style="border-collapse: collapse;border: 1px solid black; margin-bottom: 20px; text-align: center; width: 200px; float: right">
<tr>
<th style="background-color:#282829; font-weight: bold; color: white">Key</th>
</tr>
<tr>
<td style="background-color:#FFEBE5">🔓 SSL is Disabled</td>
</tr>
<tr>
<td style="background-color:#E5FFEB">🔒 SSL is Enabled</td>
</tr>
</table>
*<strong>Live streaming</strong> to VALT
*<strong>Recording</strong> sessions
*<strong>Uploading</strong> sessions

{{hr - 2}}

<table class="network_ports_table">
<tr>
<th>Port</th>
<th>Protocol</th>
<th>Service</th>
<th>Source</th>
<th>Destination</th>
</tr>
<tr class="help" title="Required only when SSL is Disabled" style="background-color:#FFEBE5">
<td>🔓 TCP 80</td>
<td>HTTP</td>
<td>BEAM API/HTTP Upload</td>
<td>BEAM Device</td>
<td>Media Server</td>
</tr>
<tr class="help" title="Required only when SSL is Disabled" style="background-color:#EFDBD5">
<td>🔓 TCP 1935</td>
<td>RTMP</td>
<td>Video Streaming</td>
<td>BEAM Device</td>
<td>Media Server</td>
</tr>
<tr class="help" title="Required only when SSL is Enabled" style="background-color:#E5FFEB">
<td>🔒 TCP 443</td>
<td>HTTPS</td>
<td>BEAM API/HTTPS Upload</td>
<td>BEAM Device</td>
<td>Media Server</td>
</tr>
<tr class="help" title="Required only when SSL is Enabled" style="background-color:#D5EFDB">
<td>🔒 TCP 444</td>
<td>RTMP</td>
<td>Video Streaming</td>
<td>BEAM Device</td>
<td>Media Server</td>
</tr>
</table>
}}

{{Top of Page}}
{{hr}}

{{Manual lvl 2 | title = ROAM Cart (Mobile Camera) | content =
{{Network Requirements - ROAM Carts}}
}}

{{Top of Page}}
{{hr}}

{{Manual lvl 2 | title = Online Updates | content =
<div style="float:right;margin-left: 20px; width: 305px;">{{Aside | content = Valid DNS servers are required to download updates.}}</div>
<div>This table outlines the required ports and repositories that must be accessible for VALT servers to download and install the <b>latest packages and updates</b>.</div>

{{hr - 2}}

<table class="network_ports_table">
<tr>
<th>Port</th>
<th>Protocol</th>
<th>Package</th>
<th>Source</th>
<th>Destination</th>
</tr>
<tr>
<td>TCP 80</td>
<td>HTTP</td>
<td>Ubuntu</td>
<td>Application & Media Server</td>
<td>http://us.archive.ubuntu.com</td>
</tr>
<tr>
<td>TCP 80</td>
<td>HTTP</td>
<td>Ubuntu</td>
<td>Application & Media Server</td>
<td>http://security.ubuntu.com</td>
</tr>
<tr>
<td>TCP 443</td>
<td>HTTPS</td>
<td>IVS</td>
<td>Application & Media Server</td>
<td>https://apt.ipivs.com</td>
</tr>
<tr>
<td>TCP 443</td>
<td>HTTPS</td>
<td>Ubuntu Changelogs</td>
<td>Application & Media Server</td>
<td>https://changelogs.ubuntu.com</td>
</tr>
<tr>
<td>TCP 443</td>
<td>HTTPS</td>
<td>Docker</td>
<td>Application & Media Server</td>
<td> https://download.docker.com</td>
</tr>
<tr>
<td>TCP 443</td>
<td>HTTPS</td>
<td>Docker</td>
<td>Application & Media Server</td>
<td> https://docker.ipivs.com</td>
</tr>
</table>
}}

{{Top of Page}}
{{hr}}

{{Manual lvl 2 | title = Multiple Server Configurations | content =
{{Float | content = {{img - resize | file = Network Architecture-Multi Server.webp | width = 300px}} }}
For larger deployments—<em>such as those <b>exceeding 50 cameras</b> or spanning multiple departments</em>—the system supports a distributed architecture using multiple Media Servers.

<div style="font-weight: bold; font-size: 1.1em">In this model:</div>
*One Application Server hosts the core application services
*One or more dedicated Media Servers handle video processing and storage
*Media Servers can be added incrementally to scale performance and capacity

{{Float | content =
<table style="border-collapse: collapse;border: 1px solid black; margin-bottom: 20px; text-align: center; width: 200px; float: right">
<tr>
<th style="background-color:#282829; font-weight: bold; color: white">Key</th>
</tr>
<tr>
<td>Always Required</td>
</tr>
<tr>
<td style="background-color:#FFEBE5">🔓 SSL is Disabled</td>
</tr>
<tr>
<td style="background-color:#E5FFEB">🔒 SSL is Enabled</td>
</tr>
</table>
}}

<div style="width:435px">{{Aside | content = Only required for installations where additional servers, acting as Media Servers, are present.}}</div>

{{hr - 2}}

<table class="network_ports_table">
<caption>Application Server to Media Server(s)</caption>
<tr>
<th>Port</th>
<th>Protocol</th>
<th>Service</th>
<th>Source</th>
<th>Destination</th>
</tr>
<tr>
<td>TCP 22</td>
<td>SSH</td>
<td>OS</td>
<td>Application Server</td>
<td>Media Server</td>
</tr>
<tr class="help" title="Required only when SSL is Enabled" style="background-color:#E5FFEB">
<td>🔒 TCP 444</td>
<td>HTTPS</td>
<td>Wowza Streaming Engine</td>
<td>Application Server</td>
<td>Media Server</td>
</tr>
<tr class="help" title="Required only when SSL is Disabled" style="background-color:#FFEBE5">
<td>🔓 TCP 1935</td>
<td>HTTP</td>
<td>Wowza Streaming Engine</td>
<td>Application Server</td>
<td>Media Server</td>
</tr>
<tr>
<td>TCP 8000</td>
<td>HTTP/HTTPS</td>
<td>Wowza Streaming Engine</td>
<td>Application Server</td>
<td>Media Server</td>
</tr>
<tr>
<td>TCP 8086</td>
<td>HTTP/HTTPS</td>
<td>Wowza Streaming Engine</td>
<td>Application Server</td>
<td>Media Server</td>
</tr>
<tr>
<td>TCP 8087</td>
<td>HTTP</td>
<td>Wowza Streaming Engine</td>
<td>Application Server</td>
<td>Media Server</td>
</tr>
</table>

<table class="network_ports_table">
<caption>Media Server(s) to Application Server</caption>
<tr>
<th>Port</th>
<th>Protocol</th>
<th>Service</th>
<th>Source</th>
<th>Destination</th>
</tr>
<tr>
<td>TCP 22</td>
<td>SSH</td>
<td>OS</td>
<td>Media Server</td>
<td>Application Server</td>
</tr>
<tr class="help" title="Required only when SSL is Disabled" style="background-color:#FFEBE5">
<td>🔓 TCP 80</td>
<td>HTTP</td>
<td>Wowza Streaming API</td>
<td>Media Server</td>
<td>Application Server</td>
</tr>
<tr class="help" title="Required only when SSL is Enabled" style="background-color:#E5FFEB">
<td>🔒 TCP 443</td>
<td>HTTPS</td>
<td>Wowza Streaming API</td>
<td>Media Server</td>
<td>Application Server</td>
</tr>
<tr>
<td>TCP 8086</td>
<td>HTTP/HTTPS</td>
<td>Wowza Streaming Engine</td>
<td>Media Server</td>
<td>Application Server</td>
</tr>
<tr>
<td>TCP 8087</td>
<td>HTTP</td>
<td>Wowza Streaming Engine</td>
<td>Media Server</td>
<td>Application Server</td>
</tr>
</table>
}}

{{Top of Page}}
{{hr}}

==Digital Wowza License==
This communication is required to verify valid Wowza Streaming licenses.

{{Aside | content = Only required for servers utilizing an electronic Wowza key. Servers with a physical Wowza key do not need access to the licensing servers.}}

<table class="network_ports_table">
<caption>Media Servers to Wowza Licensing Servers</caption>
<tr>
<th>Port</th>
<th>Protocol</th>
<th>Source</th>
<th>Destination</th>
</tr>
<tr>
<td>TCP 80</td>
<td>HTTP</td>
<td>Media Server</td>
<td>wowzalicense-all.wowzamedia.com</td>
</tr>
<tr>
<td>TCP 80</td>
<td>HTTP</td>
<td>Media Server</td>
<td>wowzalicense1.wowzamedia.com</td>
</tr>
<tr>
<td>TCP 80</td>
<td>HTTP</td>
<td>Media Server</td>
<td>wowzalicense2.wowzamedia.com</td>
</tr>
<tr>
<td>TCP 80</td>
<td>HTTP</td>
<td>Media Server</td>
<td>wowzalicense3.wowzamedia.com</td>
</tr>
<tr>
<td>TCP 80</td>
<td>HTTP</td>
<td>Media Server</td>
<td>wowzalicense4.wowzamedia.com</td>
</tr>
</table>

{{Top of Page}}
{{hr}}

==VALT Cloud==
VALT Cloud is a hybrid solution that requires an on-premise server and a cloud server.

The cloud server is the Application Server. This hosts the website where users will access the application.

The on-premise server is a Media Server. This hosts the camera streams and recordings.

The on premise media server will establish a connection to the VALT AWS Private Cloud. All traffic will flow through this connection. This connection requires the following ports:

<table class="network_ports_table">
<caption>On-Premise Media Server to Cloud Application Server</caption>
<tr>
<th>Port</th>
<th>Source</th>
<th>Destination</th>
</tr>
<tr>
<td>UDP 500</td>
<td>On-Premise Media Server</td>
<td>Cloud Application Server</td>
</tr>
<tr>
<td>UDP 4500</td>
<td>On-Premise Media Server</td>
<td>Cloud Application Server</td>
</tr>
<tr>
<td>GRE</td>
<td>On-Premise Media Server</td>
<td>Cloud Application Server</td>
</tr>
</table>

{{Top of Page}}
{{hr}}

VALT Cloud utilizes Let's Encrypt to provide SSL certificates. The On-Premise Media Server must be able to communicate with the following websites to request the certificate:

<table class="network_ports_table">
<caption>Let's Encrypt</caption>
<tr>
<th>Port</th>
<th>Protocol</th>
<th>Source</th>
<th>Destination</th>
</tr>
<tr>
<td>TCP 443</td>
<td>HTTPS</td>
<td>On Premise Media Server</td>
<td>https://acme-v02.api.letsencrypt.org</td>
</tr>
<tr>
<td>TCP 443</td>
<td>HTTPS</td>
<td>On Premise Media Server</td>
<td>https://route53.amazonaws.com</td>
</tr>
</table>

{{Top of Page}}
}}
[[Category:VALT]]

@@ Line 298: / Line 298: @@
 {{Float | content = {{img - resize | file = Network Architecture-Multi Server.webp | width = 300px}} }}
 {{Manual lvl 2 | title = Multiple Server Configurations | content =
-{{Aside | style = width: 330px; margin-left: 0px | content = Only required for installations where additional servers, acting as Media Servers, are present.}}
+{{Aside | style = width: 303px; margin-left: 0px | content = Only required for installations where additional servers, acting as Media Servers, are present.}}
 For larger deployments—<em>such as those <b>exceeding 50 cameras</b> or spanning multiple departments</em>—the system supports a distributed architecture using multiple Media Servers.

@@ Line 296: / Line 296: @@
 {{hr}}
 {{Manual lvl 2 | title = Multiple Server Configurations | content =
 {{Aside | style = width: 300px | content = Only required for installations where additional servers, acting as Media Servers, are present.}}
 For larger deployments—<em>such as those <b>exceeding 50 cameras</b> or spanning multiple departments</em>—the system supports a distributed architecture using multiple Media Servers.
 {{Float | content =
 <table style="border-collapse: collapse;border: 1px solid black; margin-bottom: 20px; text-align: center; width: 200px; float: right">
@@ Line 319: / Line 318: @@
 </table>
 }}
 *One Application Server hosts the core application services
 *One or more dedicated Media Servers handle video processing and storage