Network Requirements
Contents
Architecture and Terms
Application Server: This makes up the bulk of the application and consists of 3 primary components:
- PHP web pages being served up by the Apache web server
- MySQL Database
- NodeJS messaging and control service
Media Server: This portion of the application handles all the communication with the cameras and video streams being served out to the client PCs. It also handles all the recording and clip creation.
From a physical or virtual server perspective, the entire server side software stack can be run on a single server. For applications requiring more than 50 cameras or consisting of different departments the software can be broken out and additional Media Servers can be added. These servers only run the Media Server portion of the VALT application.
Visual Overview
Basic Configuration
Port | Protocol | Service | Source | Destination | |
---|---|---|---|---|---|
🔓 TCP 80 | HTTP | Web Application | Client | Application Server | |
🔓 TCP 1935 | WS | Video Streaming | Client | Application & Media Server | |
🔒 TCP 443 | HTTPS | Web Application | Client | Application Server | |
🔒 TCP 444 | WSS | Video Streaming | Client | Application & Media Server | |
TCP 8000 | HTTP/HTTPS* | Downloads/Wowza webserver | Client | Application & Media Server | |
For Administration | |||||
🔧 TCP 22 | SSH | SSH | Client | Application & Media Server | |
🔧 TCP 8088 | HTTP | Wowza admin | Client | Application & Media Server |
🔓 Required when SSL is Disabled 🔒 Required when SSL is Enabled 🔧 Required only for Administration
Port | Protocol | Service | Source | Destination |
---|---|---|---|---|
TCP 80 | HTTP | Web Application/API | Media Server | Camera |
TCP 554 | RTSP | Video Stream | Media Server | Camera |
BEAM (Mobile Application)
- Live streaming to VALT
- Recording sessions
- Uploading sessions
Port | Protocol | Service | Source | Destination |
---|---|---|---|---|
🔓 TCP 80 | HTTP | BEAM API/HTTP Upload | BEAM Device | Media Server |
🔒 TCP 443 | HTTPS | BEAM API/HTTPS Upload | BEAM Device | Media Server |
TCP 444 | RTMP | Video Streaming | BEAM Device | Media Server |
TCP 1935 | RTMP | Video Streaming | BEAM Device | Media Server |
🔓 Required when SSL is Disabled 🔒 Required when SSL is Enabled
Online Updates
Port | Protocol | Package | Source | Destination |
---|---|---|---|---|
TCP 80 | HTTP | Ubuntu | Application & Media Server | http://us.archive.ubuntu.com |
TCP 80 | HTTP | Ubuntu | Application & Media Server | http://security.ubuntu.com |
TCP 80 | HTTP | Ubuntu | Application & Media Server | http://kazooie.canonical.com |
TCP 80 | HTTP | Ubuntu | Application & Media Server | http://banjo.canonical.com |
TCP 80 | HTTP | IVS | Application & Media Server | http://apt.ipivs.com |
TCP 80 | HTTP | Ondrej Apache/PHP | Application & Media Server | http://ppa.launchpad.net |
TCP 443 | HTTPS | Ondrej Apache/PHP | Application & Media Server | https://ppa.launchpadcontent.net |
TCP 443 | HTTPS | Ubuntu Changelogs | Application & Media Server | https://changelogs.ubuntu.com |
TCP 443 | HTTPS | Node | Application & Media Server | https://deb.nodesource.com |
TCP 443 | HTTPS | Docker | Application & Media Server | https://download.docker.com |
TCP 443 | HTTPS | Docker | Application & Media Server | https://docker.ipivs.com |
Application Server to Additional Media Server(s)
Port | Protocol | Service | Source | Destination |
---|---|---|---|---|
TCP 22 | SSH | OS | Application Server | Media Server |
🔒 TCP 444 | HTTPS | Wowza Streaming Engine | Application Server | Media Server |
🔓 TCP 1935 | HTTP | Wowza Streaming Engine | Application Server | Media Server |
TCP 8000 | HTTP/HTTPS | Wowza Streaming Engine | Application Server | Media Server |
TCP 8086 | HTTP/HTTPS | Wowza Streaming Engine | Application Server | Media Server |
TCP 8087 | HTTP | Wowza Streaming Engine | Application Server | Media Server |
Port | Protocol | Service | Source | Destination |
---|---|---|---|---|
TCP 22 | SSH | OS | Media Server | Application Server |
🔓 TCP 80 | HTTP | Wowza Streaming API | Media Server | Application Server |
🔒 TCP 443 | HTTPS | Wowza Streaming API | Media Server | Application Server |
TCP 8086 | HTTP/HTTPS | Wowza Streaming Engine | Media Server | Application Server |
TCP 8087 | HTTP | Wowza Streaming Engine | Media Server | Application Server |
🔓 Required when SSL is Disabled 🔒 Required when SSL is Enabled
Digital Wowza License
This communication is required to verify valid Wowza Streaming licenses.
Port | Protocol | Source | Destination |
---|---|---|---|
TCP 80 | HTTP | Media Server | wowzalicense-all.wowzamedia.com |
TCP 80 | HTTP | Media Server | wowzalicense1.wowzamedia.com |
TCP 80 | HTTP | Media Server | wowzalicense2.wowzamedia.com |
TCP 80 | HTTP | Media Server | wowzalicense3.wowzamedia.com |
TCP 80 | HTTP | Media Server | wowzalicense4.wowzamedia.com |
VALT Cloud
VALT Cloud is a hybrid solution that requires an on-premise server and a cloud server.
The cloud server is the Application Server. This hosts the website where users will access the application.
The on-premise server is a Media Server. This hosts the camera streams and recordings.
The on premise media server will establish a connection to the VALT AWS Private Cloud. All traffic will flow through this connection. This connection requires the following ports:
Port | Source | Destination |
---|---|---|
UDP 500 | On-Premise Media Server | Cloud Application Server |
UDP 4500 | On-Premise Media Server | Cloud Application Server |
GRE | On-Premise Media Server | Cloud Application Server |
VALT Cloud utilizes Let's Encrypt to provide SSL certificates. The On-Premise Media Server must be able to communicate with the following websites to request the certificate:
Port | Protocol | Source | Destination |
---|---|---|---|
TCP 443 | HTTPS | On Premise Media Server | https://acme-v02.api.letsencrypt.org |
TCP 443 | HTTPS | On Premise Media Server | https://route53.amazonaws.com |