Source
Encryption & meeting access — found from sitemap — Whereby
Checked for Whereby on 1 Oct 2026
- Page
- https://docs.whereby.com/further-resources/faq-and-troubleshooting/firewall-and-security
- Checked
- 1 Oct 2026, 12:25 UTC
- How we may use it
- Public page, crawling permitted
Technical details
- type
- page
- http status
- 200
- content hash
- sha256:3c02cc8bf51155080fdbca9713647eb8c0043bb2e7368a8a82dbb98ae753767b
- permission
- robots_ok
- screenshot
- Screenshot on file (internal exhibit, not published)
Cited by
Facts read from this source
-
Outbound only Report an error
“Connections are initiated in the outbound direction. There is no requirement for ports to be open inbound and there are no port forwarding requirements.”
-
Signaling transport Report an error
“Control messages between the clients and Whereby servers when in a call ("signaling") is transmitted over secure websockets (wss). These utilize the same ports as HTTPS”
-
Turn relay network Report an error
“Whereby provides a network of TURN servers that act as relays. These servers are placed across the globe and participants will connect to the closest ones. Participants will connect to port 443 on these servers, using either UDP or TCP (TLS). For call quality and experience, UDP is the preferred protocol.”
-
Firewall ports Report an error
“Whereby signaling (wss) browser-device 443 TCP Whereby TURN relay (TCP/TLS) browser-device 443 TCP Whereby TURN relay (UDP) browser-device 443 UDP Whereby TURN/SFU highport browser-device 1024-65535 UDP”
-
Domain allowlist Report an error
“*.sfu.whereby.com *.sfu.svc.whereby.com *.srv.whereby.com *.svc.whereby.com *.appearin.net *.turn.whereby.com *.turn.svc.whereby.com *.posthog.com *.sentry.io *.helpscout.net *.amazonaws.net (for user avatars) *.cloudfront.net”
-
No static ip range Report an error
“Whereby servers don't currently have a static range of IP addresses. We can provide a list of current server IPs to our annual an enterprise customers upon request.”
-
Fqdn only limitation Report an error
“Important: Domain/DNS allowlisting is not a reliable trust anchor for ICE media over UDP.”
-
Turn hostnames Report an error
“*.turn.whereby.com *.turn.svc.whereby.com turnserver.appearin.net”
-
Fqdn only fallback Report an error
“Whereby may still work using TURN over TCP/TLS (443) (where hostname-based allowlisting is more feasible), but call quality may be reduced compared to UDP.”