Connect with Cloud Proxy

Updated

Use Agora's cloud proxy service to run IoT SDK in network environments that restrict direct access to Agora's SDRTN®.

If your device runs inside a network that restricts direct access to Agora SDRTN® (Software-Defined Real-Time Network), such as one behind a restrictive corporate or industrial firewall, use Agora's cloud proxy service to relay traffic through a set of Agora-owned IP addresses and ports that you add to your firewall allowlist.

Understand the tech

When cloud proxy is enabled, IoT SDK sends and receives data through the following flow:

  1. IoT SDK requests proxy information from the Agora cloud proxy service.
  2. IoT SDK sends data to the cloud proxy, which relays it to Agora SDRTN®.
  3. Agora SDRTN® returns data to the cloud proxy, which relays it back to IoT SDK.

Enable cloud proxy

Call agora_rtc_set_cloud_proxy before you join a channel to set the cloud proxy mode:

int rval = agora_rtc_set_cloud_proxy(CLOUD_PROXY_UDP);
if (rval < 0) {
    printf("Failed to set cloud proxy, reason: %s\n", agora_rtc_err_2_str(rval));
    return -1;
}

type accepts the following values:

ValueDescription
CLOUD_PROXY_NONEDisables cloud proxy.
CLOUD_PROXY_UDPSends and receives data through the cloud proxy over UDP.

Bandwidth through a cloud proxy is limited compared to a direct connection to Agora SDRTN®, so only enable cloud proxy for devices that need it.

Allowlist IP addresses and ports

Before you enable cloud proxy, add the IP addresses and ports for your target regions to your firewall allowlist.

North America

Service typeIP addressesProtocolPort
Signaling Service106.14.12.130, 118.190.148.38, 184.72.16.87, 35.168.106.53, 35.156.231.150, 15.237.134.178, 54.178.26.110, 52.221.23.86, 13.230.60.35, 15.206.47.129, 13.127.149.196, 13.209.247.137, 13.124.182.235, 23.98.43.152, 107.155.14.132, 69.28.51.142UDP8443
Cloud Proxy128.14.195.192/28, 128.14.245.16/28, 128.14.72.80/28, 128.14.200.208/28UDP4590-4600, 8001-8010

Europe

Service typeIP addressesProtocolPort
Signaling Service106.14.12.130, 118.190.148.38, 184.72.16.87, 35.168.106.53, 35.156.231.150, 15.237.134.178, 54.178.26.110, 52.221.23.86, 13.230.60.35, 15.206.47.129, 13.127.149.196, 13.209.247.137, 13.124.182.235, 23.98.43.152, 107.155.14.132, 69.28.51.142UDP8443
Cloud Proxy104.166.160.208/28, 23.236.110.32/28, 104.166.142.134, 104.166.161.4UDP4590-4600, 8001-8010

Asia, excluding Mainland China

Service typeIP addressesProtocolPort
Signaling Service106.14.12.130, 118.190.148.38, 184.72.16.87, 35.168.106.53, 35.156.231.150, 15.237.134.178, 54.178.26.110, 52.221.23.86, 13.230.60.35, 15.206.47.129, 13.127.149.196, 13.209.247.137, 13.124.182.235, 23.98.43.152, 107.155.14.132, 69.28.51.142UDP8443
Cloud Proxy128.1.186.240/28, 129.227.73.32/28, 103.193.127.208/28UDP4590-4600, 8001-8010

Japan

Service typeIP addressesProtocolPort
Signaling Service106.14.12.130, 118.190.148.38, 184.72.16.87, 35.168.106.53, 35.156.231.150, 15.237.134.178, 54.178.26.110, 52.221.23.86, 13.230.60.35, 15.206.47.129, 13.127.149.196, 13.209.247.137, 13.124.182.235, 23.98.43.152, 107.155.14.132, 69.28.51.142UDP8443
Cloud Proxy129.227.113.112/28, 129.227.55.96/28, 122.10.153.74, 129.227.234.123UDP4590-4600, 8001-8010

India

Service typeIP addressesProtocolPort
Signaling Service106.14.12.130, 118.190.148.38, 184.72.16.87, 35.168.106.53, 35.156.231.150, 15.237.134.178, 54.178.26.110, 52.221.23.86, 13.230.60.35, 15.206.47.129, 13.127.149.196, 13.209.247.137, 13.124.182.235, 23.98.43.152, 107.155.14.132, 69.28.51.142UDP8443
Cloud Proxy129.227.217.128/28, 129.227.108.208/28, 128.1.105.112/28UDP4590-4600, 8001-8010

Mainland China

Service typeIP addressesProtocolPort
Signaling Service106.14.12.130, 118.190.148.38UDP8443
Cloud Proxy14.29.38.144/28, 27.45.161.144/28, 183.232.200.144/28, 115.238.206.0/28, 106.3.209.0/28, 112.13.216.0/28, 219.153.111.128/28, 221.178.42.0/28, 113.207.12.0/28UDP4590-4600, 8001-8010

Best practices

  • If you're uncertain which region your devices connect from, allowlist the IP addresses for all regions.
  • Open UDP port 53 for DNS resolution in addition to the ports listed above.

Validate your configuration

Before deploying to production:

  1. Enable cloud proxy in your app.
  2. Join a channel and confirm the connection succeeds.
  3. Monitor network quality metrics from multiple geographic locations, if possible.

Reference