Network Requirements
Connection services
User devices and workstations both connect to these. Rules written against host names keep working when Computle adds a relay under *.svc.broker.computle.com. Rules written against addresses need updating when this page changes.
Connection set-up
Section titled “Connection set-up”| Host name | Address | Port |
|---|---|---|
rdv-ths-1.prod.computle.com | 91.198.40.247 | TCP 443 and 9443 |
rdv-uka-1.prod.computle.com | 194.4.152.76 | TCP 443 and 9443 |
The client and the host each hold a list of these and try them in order, so both must be allowed.
Relays
Section titled “Relays”Relays are in London, New York and Canada. A session is offered the relays nearest to it and uses the first to answer, so allow all of them. A relay carries encrypted traffic it cannot decrypt; see How Remotle Connects.
| Host names | Under *.svc.broker.computle.com |
| Port | UDP 4443 |
| Locations | London, New York and Canada. The nearest relay is used. |
| Current list | https://softwaredownloads.oncomputle.com/diagnostics/endpoints.json lists every relay host name and port. It is the same list the Remotle app’s Diagnostics tests. |
A firewall that cannot match UDP traffic by host name needs the addresses of the relays in that list. Check the list again when Computle announces a new relay.
Network address discovery
Section titled “Network address discovery”| Host name | Port |
|---|---|
stun.cloudflare.com | UDP 3478 |
STUN lets each end learn its own public address so a direct path can be tried. If it is blocked, sessions still connect through a relay.
Related
Section titled “Related”Questions
Section titled “Questions”Can we allow by domain only?
Section titled “Can we allow by domain only?”Yes for everything on TCP 443. The relays and STUN are UDP, so a web filter that works on domain names does not see them; allow UDP 4443 to the relay addresses and UDP 3478 to stun.cloudflare.com on the firewall.
Why are there two ports for connection set-up?
Section titled “Why are there two ports for connection set-up?”The connection service answers on TCP 443 and 9443. Devices and workstations are configured with one or the other, so allow both.
Which relay will my users get?
Section titled “Which relay will my users get?”The nearest one that answers. A user in the UK normally relays through London and a user in North America through New York or Canada. The relay in use is shown in Connection Figures.