All Collections
Troubleshooting
How To
Configure network settings
Configure network settings

How to optimize port and firewall configuration for doxy.me

Colin avatar
Written by Colin
Updated over a week ago

Doxy.me sends all traffic over port 443 via HTTPS.  Our audio/video capabilities will use other ports if they are available for an optimal experience but the service ultimately degrades gracefully to send everything over TCP on 443. You can check your port using this free online tool.

The most common issue experienced by customers of our service in corporate environments is firewall software blocking video traffic.  If the website renders but you cannot send and receive video and audio, try the service on an unrestricted network to verify that computer's camera/microphone are not the issue.

If you are in an office, school, hospital, or clinic with a network firewall it's possible it is blocking access to websites or ports used by doxy.me to make a successful call. Ask your IT staff to 'whitelist' the following:

Minimum Requirements

Open TCP port 443 for traffic to: 

  • doxy.me

  • *.doxy.me

  • *.opentok.com 

  • *.tokbox.com.

  • *.pubnub.com

  • pndsn.com

  • 
limnu.com


  • *.limnu.com


  • growthbook.io

  • 
*.growthbook.io

  • 
*.cloudflare.net


  • intercom.io


  • *.intercom.io


  • segment.com


  • *.segment.com

  • dokbot.io

  • *.dokbot.io


We maintain BAAs with all vendors that help us maintain our service. You can read more about these services and how doxy.me uses them here.

NOTE: We currently do not offer IP whitelisting. If you'd like more information on our future Enterprise offering, please reach out to sales@doxy.me for more information on our Enterprise plan.

Better Experience

Along with the minimum requirements, opening UDP Port 3478 will give you a better experience. UDP is highly recommended over TCP for better quality audio and video. The protocol favors timeliness over reliability which is consistent with the human perceptive preferences; where we can fill in gaps but are sensitive to time-based delays.

This port only accepts inbound traffic after an outbound request is sent. The connection is bidirectional but is always initiated from the corporate network/client so it is not possible for an external entity to send malicious traffic in the opposite direction.

Best Experience

For the best possible experience, we recommend opening UDP ports 1025 - 65535 for opentok.com / tokbox.com

Dynamic Subdomains

We do not provide IP ranges for these servers as they distributed globally for higher quality and are constantly updated and expanded.  

Similarly, specific domains (rather than wildcard domains) cannot be listed because those servers are specified by geographical area. 

About Email Firewalls

Though it is extremely rare, if you are not receiving account setup or reset password emails, it might be because firewalls contained within ISP, data center, or email server are stopping emails from arriving. You or someone from your IT department may need to whitelist our email data provider. You should contact us first to make sure your email wasn't blacklisted. This can happen if you create a doxy.me account using an email that didn't exist at the time your account was first created.

Note also that doxy.me can be considered a "controlled application" by firewalls and anti-virus software.

If you don't believe the issue to be configuration-related, please check out our tips to improve call stability.

If you have any questions, please contact our support team.

Did this answer your question?