> ## Documentation Index
> Fetch the complete documentation index at: https://plivo.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Firewall & Network Configuration

> Plivo IP ranges and ports to whitelist on your firewall for SIP signaling, RTP media, and callbacks

> [!NOTE]
>
> * **What:** IP ranges and ports to whitelist so Plivo voice traffic can reach your infrastructure.
> * **When:** Outbound flow (Plivo → your servers). API and SDK traffic has no static IPs — whitelist domains instead.

To ensure that your communication infrastructure doesn't block communication with Plivo, we encourage you to whitelist these IP address ranges and ports on your firewall for SIP signaling and RTP media traffic.

[Subscribe](https://plivo.com/docs/voice/concepts/firewall-network-configuration.md#subscription-section) to be notified of any updates regarding IP address changes via email or RSS feed.

## Which IPs do I need?

| Your situation | Whitelist these IPs |
| - | - |
| A SIP client or softphone registers with Plivo, or someone calls directly into your Plivo application over SIP | [SIP phones](#sip-phones) |
| Plivo places or transfers a call out to your own SIP server, PBX, or contact centre | [External SIP endpoints](#external-sip-endpoints) |
| Either situation above | Also whitelist [RTP media](#rtp-media-servers) — signaling alone sets up the call, but without media the call connects with no audio |

## SIP phones

> [tab] US + Rest of World
>
> | **Type** | **IP Addresses** | **Ports** |
> | - | - | - |
> | SIP phones (phone.plivo.com & app.plivo.com) | 52.9.254.123/32 52.9.254.127/32 216.120.187.64/32 216.120.187.65/32 216.120.187.66/32 216.120.187.67/32 216.120.187.68/32 204.89.148.64/32 204.89.148.65/32 204.89.148.66/32 204.89.148.67/32 204.89.148.68/32 | 5060, 5080 (UDP) 5060, 5061, 5063, 5080, 443 (TCP) |
> | Mobile phones (mobile.phone.plivo.com) | 2600:1f1c:4ad:2f02:ac95:55cc:9a28:3891/128 | 5060, 5080 (UDP) 5060, 5061, 5063, 5080, 443 (TCP) |

> [tab] India
>
> | **Type** | **IP Addresses** | **Ports** |
> | - | - | - |
> | SIP phones (in.app.plivo.com & in.phone.plivo.com) | 13.205.117.125/32 15.206.139.66/32 | 5060, 5080 (UDP) 5060, 5061, 5063, 5080, 443 (TCP) |

## External SIP endpoints

> [tab] US + Rest of World
>
> | **IP Addresses** | **Ports** |
> | - | - |
> | 13.52.9.4/32 13.52.9.5/32 18.214.109.132/32 18.214.109.133/32 | 5060 (UDP, TCP) 5061 (TCP/TLS) |

> [tab] India
>
> | **IP Addresses** | **Ports** |
> | - | - |
> | 13.205.159.55/32 15.206.154.163/32 43.204.247.115/32 43.205.14.55/32 | 5060 (UDP, TCP) 5061 (TCP/TLS) |

## RTP media servers

| Regions | IP Addresses | Ports |
| - | - | - |
| San Jose, California, USA | 216.120.187.64/26 216.120.187.128/26 216.120.187.192/27 | 10000 - 30000 (UDP) |
| Ashburn, Virginia, USA | 204.89.148.64/26 204.89.148.128/26 204.89.148.192/27 | 10000 - 30000 (UDP) |
| Frankfurt, Germany | 3.120.121.128/26 | 10000 - 30000 (UDP) |
| São Paulo, Brazil | 54.233.191.0/27 18.228.70.64/26 | 10000 - 30000 (UDP) |
| Sydney, Australia | 13.238.202.192/26 | 10000 - 30000 (UDP) |
| Singapore | 52.220.63.176/28 204.89.149.64/27 204.89.149.128/27 | 10000 - 30000 (UDP) |
| Mumbai, India | 204.89.151.64/26 204.89.151.128/25 | 10000 - 30000 (UDP) |

## API

Since we don't support static IP address ranges for the API, you don't need to whitelist IP addresses for Voice API communication.  The domain to whitelist for Plivo APIs is api.plivo.com.

## Browser SDK client and Call Insights

We don't support static IP ranges for the Browser SDK client, Browser SDK fallback client, or Call Insights. You can whitelist their domains.

* client.plivo.com
* client-fb.plivo.com
* insights.plivo.com

## STUN servers for Browser SDK

The Plivo Browser SDK utilizes the listed STUN servers to initiate WebRTC media communications. The STUN server aids in identifying a device's public IP address and port number for communication.

* stun:stun.plivo.com:3478
* stun:stun-fb.plivo.com:3478
* stun:stun.l.google.com:19302

## Protocol Whitelisting

When using the browser and mobile SDK for calls, please ensure the protocols - SIP, RTP, STUN, and DTLS are allowed by your firewall and ISP.

## Callbacks from Plivo

Some Plivo APIs and XML elements support callback events. To make sure those callbacks are not blocked, allow traffic from these Plivo IP addresses to your web applications (ports defined by you; for HTTPS, default is 443, for HTTP it's 80).

These IP addresses are NAT gateway IPs associated with our HTTP(s) OutProxy instance.

| Regions | IP Addresses |
| - | - |
| San Jose, California, USA | 13.56.175.187/32 13.57.139.231/32 |
| Ashburn, Virginia, USA | 18.211.55.148/32 18.211.27.222/32 204.89.148.70/32 |
| Frankfurt, Germany | 3.120.80.110/32 35.157.59.132/32 |
| São Paulo, Brazil | 18.228.96.85/32 18.228.143.199/32 |
| Sydney, Australia | 13.238.88.135/32 52.62.46.143/32 |
| Singapore | 52.220.250.27/32 18.136.128.252/32 |
| Mumbai, India | 3.7.4.233/32 3.7.220.174/32 |

***

## Related

* [API Access Control (IP Whitelisting)](https://plivo.com/docs/account/concepts/ip-whitelisting.md) — Restrict which IPs can make API requests to your Plivo account
* [Messaging: Firewall & Network Configuration](https://plivo.com/docs/messaging/concepts/firewall-network-configuration.md) — Plivo IP ranges for messaging callbacks
