# Firewall and network

Hub-managed devices and self-hosted agent installs need outbound network access to reach Luxonis services for control-plane
traffic, app management, and remote sessions.

Use this page when you need to configure customer firewalls, proxies, or outbound allowlists for Luxonis Hub connectivity.

## Protocols and transport

Hub connectivity relies on these protocol families:

 * HTTPS for control-plane traffic, API access, and most service communication
 * WebRTC for streaming, live logs, and remote interactive sessions
 * TURN/STUN for cross-network WebRTC connectivity

Ensure that outbound communications are permitted on the listed ports below. Blocking these paths can break app delivery, device
connectivity, or remote session features.

## Domains

Depending on the workflow you use, devices and operators may need outbound access to these Luxonis domains:

 * hub.luxonis.com for the Hub web application
 * api.cloud.luxonis.com for Hub API traffic
 * signal.cloud.luxonis.com for signaling used during remote session setup

> **Streaming and live sessions**
> Streaming, live logs, and Web Terminal also depend on Cloudflare TURN infrastructure. If your firewall policy is domain-based,
allow the relevant Cloudflare TURN endpoints in addition to the Luxonis domains above.

## IP addresses

### Main Functionality (IPv4):

 * 34.96.75.74
 * 34.128.165.110
 * 34.128.165.110
 * 34.96.75.74
 * 34.120.251.14
 * 34.117.184.204
 * 35.190.53.221
 * 35.201.87.0
 * 34.111.158.61
 * 34.98.92.183
 * 34.149.9.74
 * 34.128.176.21
 * 34.160.73.236
 * 34.117.33.110
 * 34.49.35.47

### Main Functionality (IPv6):

 * 2600:1901:0:e27b::
 * 2600:1901:0:dcd4::

### Streaming and Live Logs:

For streaming features and retrieving live logs, OAK Agent uses WebRTC and communicates through Cloudflare's TURN infrastructure.

To ensure proper operation, allow the IP ranges listed on the official [Cloudflare documentation
page](https://developers.cloudflare.com/fundamentals/concepts/cloudflare-ip-addresses/).

> **Enterprise Feature**
> We offer a
> **reduced number of static IPs**
> for Enterprise clients with stricter firewall configurations. Reach out to
> **cj.mann@luxonis.com**
> if you are interested in this feature.

## Ports

### Outgoing connections:

 * 53: UDP
 * 80: TCP
 * 443: TCP
 * 3478: TCP/UDP
 * 5349: TCP/UDP
 * 49152-65535: UDP