On-Prem Network Requirements

Introduction

Architecture and Terms

Our software is built on the standard LEMP (Linux, Nginx, MYSQL, and PHP) architecture. The software has been designed to work on the latest LTS version of Ubuntu Linux. For networking purposes, there are 2 main components to the software application:

---

Application Server:

This makes up the bulk of the application and consists of 3 primary components:

1. PHP web pages being served up by the Nginx web server
2. MySQL Database
3. NodeJS messaging and control service

---

Media Server:

This portion of the application handles all the communication with the cameras and video streams being served out to the client PCs. It also handles all the recording and clip creation.

🕮

From a physical or virtual server perspective, the entire server side software stack can be run on a single server.

---

For applications requiring more than 50 cameras or consisting of different departments the software can be broken out and additional Media Servers can be added.

⇧ Back to Top

---

Basic Configuration

Key
Always Required
🔓 SSL is Disabled
🔒 SSL is Enabled
🔧 For Administration

Client to Application & Media Server(s)

This table shows the ports that must be opened for client machines to speak to the VALT Application and Media servers. Use the key to understand when certain ports apply.

---

Port	Protocol	Service	Source	Destination
🔓 TCP 80	HTTP	Web Application	Client	Application Server
🔓 TCP 1935	WS	Video Streaming	Client	Application & Media Server
🔒 TCP 443	HTTPS	Web Application	Client	Application Server
🔒 TCP 444	WSS	Video Streaming	Client	Application & Media Server
TCP 8000	HTTP/HTTPS*	Downloads/Wowza webserver	Client	Application & Media Server
For Administration
🔧 TCP 22	SSH	SSH	Client	Application & Media Server
🔧 TCP 8088	HTTP	Wowza admin	Client	Application & Media Server

⇧ Back to Top

---

Media Server(s) to Video Device(s)

This table shows the ports that must be opened for the video devices to communicate with VALT. Video devices refers to hardware such as:

• Cameras
• Encoders

---

Port	Protocol	Service	Source	Destination
TCP 80	HTTP	Web Application/API	Media Server	Camera
TCP 554	RTSP	Video Stream	Media Server	Camera

⇧ Back to Top

---

Other Configurations

BEAM (Mobile Application)

✎

Only required for those who have purchased BEAM licenses.

BEAM is an application that allows users to leverage devices, such as iPads and iPhones, as a mobile video endpoint. This includes the following features:

Key
🔓 SSL is Disabled
🔒 SSL is Enabled

• Live streaming to VALT
• Recording sessions
• Uploading sessions

---

Port	Protocol	Service	Source	Destination
🔓 TCP 80	HTTP	BEAM API/HTTP Upload	BEAM Device	Media Server
🔓 TCP 1935	RTMP	Video Streaming	BEAM Device	Media Server
🔒 TCP 443	HTTPS	BEAM API/HTTPS Upload	BEAM Device	Media Server
🔒 TCP 444	RTMP	Video Streaming	BEAM Device	Media Server

⇧ Back to Top

---

Online Updates

✎

Valid DNS servers are required to download updates.

This table outlines the required ports and repositories that must be accessible for VALT servers to download and install the latest packages and updates.

---

Port	Protocol	Package	Source	Destination
TCP 80	HTTP	Ubuntu	Application & Media Server	http://us.archive.ubuntu.com
TCP 80	HTTP	Ubuntu	Application & Media Server	http://security.ubuntu.com
TCP 443	HTTPS	IVS	Application & Media Server	https://apt.ipivs.com
TCP 443	HTTPS	Ubuntu Changelogs	Application & Media Server	https://changelogs.ubuntu.com
TCP 443	HTTPS	Docker	Application & Media Server	https://download.docker.com
TCP 443	HTTPS	Docker	Application & Media Server	https://docker.ipivs.com

⇧ Back to Top

---

Multiple Server Configurations

✎

Only required for installations where additional servers, acting as Media Servers, are present.

Key
Always Required
🔓 SSL is Disabled
🔒 SSL is Enabled

---

Application Server to Media Server(s)

Port	Protocol	Service	Source	Destination
TCP 22	SSH	OS	Application Server	Media Server
🔒 TCP 444	HTTPS	Wowza Streaming Engine	Application Server	Media Server
🔓 TCP 1935	HTTP	Wowza Streaming Engine	Application Server	Media Server
TCP 8000	HTTP/HTTPS	Wowza Streaming Engine	Application Server	Media Server
TCP 8086	HTTP/HTTPS	Wowza Streaming Engine	Application Server	Media Server
TCP 8087	HTTP	Wowza Streaming Engine	Application Server	Media Server

Media Server(s) to Application Server

Port	Protocol	Service	Source	Destination
TCP 22	SSH	OS	Media Server	Application Server
🔓 TCP 80	HTTP	Wowza Streaming API	Media Server	Application Server
🔒 TCP 443	HTTPS	Wowza Streaming API	Media Server	Application Server
TCP 8086	HTTP/HTTPS	Wowza Streaming Engine	Media Server	Application Server
TCP 8087	HTTP	Wowza Streaming Engine	Media Server	Application Server

⇧ Back to Top

---

Digital Wowza License

This communication is required to verify valid Wowza Streaming licenses.

✎

Only required for servers utilizing an electronic Wowza key. Servers with a physical Wowza key do not need access to the licensing servers.

Media Servers to Wowza Licensing Servers

Port	Protocol	Source	Destination
TCP 80	HTTP	Media Server	wowzalicense-all.wowzamedia.com
TCP 80	HTTP	Media Server	wowzalicense1.wowzamedia.com
TCP 80	HTTP	Media Server	wowzalicense2.wowzamedia.com
TCP 80	HTTP	Media Server	wowzalicense3.wowzamedia.com
TCP 80	HTTP	Media Server	wowzalicense4.wowzamedia.com

⇧ Back to Top