If you have a firewall configured for your network, you will need to update your network configuration to allowlist specific IP addresses and ports, to ensure that your Spruce VoIP phone system functions as intended.
Here’s a definitive list of IP ranges that you can configure your firewall to allow on any port. The list contains all the IP ranges referenced in detail below. We’ll continue to keep the file up to date along with this help center article.
Updated as of June 5, 2024
The IP addresses listed under “Yealink VoIP phones” below have been updated. Please update your network/firewall configuration settings to reflect the updated list by June 21, 2024 to avoid call connection issues.
[UPDATED] Yealink VoIP phones
This section applies ONLY if you use a Yealink device with Spruce
Ports: 443, 8110, 8443, 8445, 8446
IPs:
- 20.242.144.0/29
Ports: 443
IPs:
- 20.242.144.3
- 20.88.189.229
- 20.19.104.34
- 20.85.145.227
- 20.242.144.6
- 20.19.104.34
Ports: 8110
IPs:
- 20.242.144.4
- 20.242.144.6
Ports: 443, 80, 8443, 9989, 8445, 8446, 9090
IPs:
- 54.174.154.29
- 52.5.133.228
- 20.19.104.34
- 20.199.107.91
Ports: 443, 80, 8443, 9989, 8445, 8446, 9090, 5961
IPs:
- 52.71.103.102
- 20.19.96.56
- 51.11.241.228
- 20.242.144.0
- 20.242.144.1
Ports: 443, 80, 8443, 9989, 8445, 8446, 9090
IPs:
- 52.201.1.15
- 34.238.237.220
All phones: Global media IP addresses and ports
IP address and port ranges to allowlist:
- IP Range: 168.86.128.0/18
- Port Range: 10,000 to 60,000 (UDP)
All phones: Regional IP addresses
Until our telecommunications infrastructure provider transitions completely to the global IP addresses and ports listed above, you MUST allow ALL of the following IP address ranges and port ranges on your firewall for SIP signaling and RTP media traffic. This is important because numbers can be in different edge locations and also because it improves network resiliency (e.g., if North America Virginia gateways are down, then North America Oregon gateways will be used). There is no guarantee of which edge location the media will egress from, as it can depend on which PSTN-SIP Gateway delivers the call to which edge location.
Virginia: Signaling IPs
Ports: 5060 (UDP/TCP), 5061 (TLS)
IPs:
- 54.172.60.0
- 54.172.60.1
- 54.172.60.2
- 54.172.60.3
Virginia: Media IPs
Port Range: 10,000 to 60,000 (UDP)
IPs:
- 54.172.60.0/23
- 34.203.250.0/23
Oregon: Signaling IPs
Ports: 5060 (UDP/TCP), 5061 (TLS)
IPs:
- 54.244.51.0
- 54.244.51.1
- 54.244.51.2
- 54.244.51.3
Oregon: Media IPs
Port Range: 10,000 to 60,000 (UDP)
IPs:
- 54.244.51.0/24
Asia-Pacific Tokyo: Signaling IPs
Note: These are important if you have virtual assistants in the Philippines or surrounding countries.
Ports: 5060 (UDP/TCP), 5061 (TLS)
IPs:
- 54.65.63.192
- 54.65.63.193
- 54.65.63.194
- 54.65.63.195
Asia-Pacific Tokyo: Media IPs
Note: These are important if you have virtual assistants in the Philippines or surrounding countries.
Port Range: 10,000 to 20,000 (UDP)
IPs:
- 54.65.63.192/26
- 3.112.80.0/24
Asia-Pacific Singapore: Signaling IPs
Note: These are important if you have virtual assistants in the Philippines or surrounding countries.
Ports: 5060 (UDP/TCP), 5061 (TLS)
IPs:
- 54.169.127.128
- 54.169.127.129
- 54.169.127.130
- 54.169.127.131
Asia-Pacific Singapore: Media IPs
Note: These are important if you have virtual assistants in the Philippines or surrounding countries.
Port Range: 10,000 to 20,000 (UDP)
IPs:
- 54.169.127.128/26
- 3.1.77.0/24
Poly Obihai VoIP phones
This section applies ONLY if you use one of the following VoIP phones with Spruce:
- Poly VVX 250
- Poly VVX D230
- Obihai 1032
- Obihai 1062
Obitalk Voice Service
Ports: UDP/TCP: 10000 to 20000, TLS: 443
IPs:
- 54.241.160.4: TCP: 6800
- 54.241.163.234
- 54.67.107.54
- 54.67.113.163
- 54.219.101.213
- 52.52.249.241
- 52.53.96.55
- 13.52.69.0
- 54.241.91.173
- 52.9.223.41
- 52.9.225.203
- 13.56.185.145
- 13.57.121.193
Obitalk Provisioning
Addresses and protocols:
- www.obitalk.com HTTP/HTTPS
- www1.obitalk.com HTTP/HTTPS
- prov.obitalk.com HTTP/HTTPS
- devpfs.obitalk.com HTTP/HTTPS
- api.obitalk.com HTTP/HTTPS
- fw.obitalk.com HTTP