VoIP Phone System: Firewall Configuration Settings

If you have a firewall configured for your network, you will need to update your network configuration to allowlist specific IP addresses and ports, to ensure that your Spruce VoIP phone system functions as intended.

[NEW] All phones: Global media IP addresses and ports

CRITICAL: Our VoIP infrastructure provider will make a critical networking update on September 26, 2023, which will affect the IP addresses and ports used for Spruce VoIP functionality. You MUST ensure that your network/firewall configuration settings reflect the following IP address and port ranges by September 26, 2023, or you will begin to experience one-way audio, dropped calls, and other call failures on this date.

⚠ NEW IP address and port ranges to allowlist:

IP Range: 168.86.128.0/18
Port Range: 10,000 to 60,000 (UDP)

All phones: Regional IP addresses

Until our telecommunications infrastructure provider transitions completely to the global IP addresses and ports listed above, you MUST allow ALL of the following IP address ranges and port ranges on your firewall for SIP signaling and RTP media traffic. This is important because numbers can be in different edge locations and also because it improves network resiliency (e.g., if North America Virginia gateways are down, then North America Oregon gateways will be used). There is no guarantee of which edge location the media will egress from, as it can depend on which PSTN-SIP Gateway delivers the call to which edge location.

Virginia: Signaling IPs

Ports: 5060 (UDP/TCP), 5061 (TLS)

IPs:

54.172.60.0
54.172.60.1
54.172.60.2
54.172.60.3

Virginia: Media IPs

Port Range: 10,000 to 60,000 (UDP)

IPs:

54.172.60.0/23
34.203.250.0/23

Oregon: Signaling IPs

Ports: 5060 (UDP/TCP), 5061 (TLS)

IPs:

54.244.51.0
54.244.51.1
54.244.51.2
54.244.51.3

Oregon: Media IPs

Port Range: 10,000 to 60,000 (UDP)

IPs:

54.244.51.0/24

Asia-Pacific Tokyo: Signaling IPs

Note: These are important if you have virtual assistants in the Philippines or surrounding countries.

Ports: 5060 (UDP/TCP), 5061 (TLS)

IPs:

54.65.63.192
54.65.63.193
54.65.63.194
54.65.63.195

Asia-Pacific Tokyo: Media IPs

Note: These are important if you have virtual assistants in the Philippines or surrounding countries.

Port Range: 10,000 to 20,000 (UDP)

IPs:

54.65.63.192/26
3.112.80.0/24

Asia-Pacific Singapore: Signaling IPs

Note: These are important if you have virtual assistants in the Philippines or surrounding countries.

Ports: 5060 (UDP/TCP), 5061 (TLS)

IPs:

54.169.127.128
54.169.127.129
54.169.127.130
54.169.127.131

Asia-Pacific Singapore: Media IPs

Note: These are important if you have virtual assistants in the Philippines or surrounding countries.

Port Range: 10,000 to 20,000 (UDP)

IPs:

54.169.127.128/26
3.1.77.0/24

Poly Obihai VoIP phones

This section applies ONLY if you use one of the following VoIP phones with Spruce:

Poly VVX 250
Poly VVX D230
Obihai 1032
Obihai 1062

Obitalk Voice Service

Ports: UDP/TCP: 10000 to 20000, TLS: 443

IPs:

54.241.160.4: TCP: 6800
54.241.163.234
54.67.107.54
54.67.113.163
54.219.101.213
52.52.249.241
52.53.96.55
13.52.69.0
54.241.91.173
52.9.223.41
52.9.225.203
13.56.185.145
13.57.121.193

Obitalk Provisioning

Addresses and protocols:

www.obitalk.com HTTP/HTTPS
www1.obitalk.com HTTP/HTTPS
prov.obitalk.com HTTP/HTTPS
devpfs.obitalk.com HTTP/HTTPS
api.obitalk.com HTTP/HTTPS
fw.obitalk.com HTTP

[NEW] Yealink VoIP phones

This section applies ONLY if you use one of the following VoIP phones with Spruce:

Yealink T31G
Yealink T53W

microdm service

Ports: 443, 80, 8443, 9989, 8445, 8446, 9090

IPs:

54.174.154.29
52.5.133.228
20.19.104.34
20.199.107.91

RPS

Ports: 443, 80, 8443, 9989, 8445, 8446, 9090

IPs:

52.71.103.102
20.19.96.56
51.11.241.228
20.242.144.0
20.242.144.1

microtcp service

Ports: 443, 80, 8443, 9989, 8445, 8446, 9090

IPs:

52.201.1.15
34.238.237.220