Network Port Settings

5 min

For the Zixi Broadcaster operating as a streaming server, the following ports must be opened on your Firewall(s) as described below:

Network Settings for Zixi Broadcaster as Streaming Server

Port	Type	Direction	Description	Protocol
2088/7088 ***	UDP	Inbound*	Push input from a Zixi enabled feeding software **	Zixi
2077/7077 ***	UDP	Inbound*	Pull output by Zixi enabled receiving software **	Zixi
2088/7088 ***	UDP	Outbound*	Push output to a Zixi Broadcaster or AWS MediaConnect	Zixi
2077/7077 ***	UDP	Outbound*	Pull input from a Zixi Broadcaster or AWS MediaConnect	Zixi
1935	TCP	Inbound*	Push input from RTMP enabled software	RTMP
1935	TCP	Outbound*	Push output to CDN origin server or RTMP enabled software	RTMP
7777	TCP	Inbound*	Pull output from HTML5 video player or CDN caching software	HLS or DASH
4444	TCP	Inbound*	Web management UI	HTTP
80/443	TCP	Outbound*	Communication to Zixi License server - For all Broadcaster versions: license.zixi.com, license2.zixi.com For Broadcaster v19 and later: also add: licensing.zixi.com 52.72.218.41 34.195.97.223 3.140.62.221 3.137.16.26 ZEN Master Backend Servers 18.210.103.157 23.20.44.73 34.200.88.233 34.238.1.65 35.170.111.151 52.4.9.203	HTTP/HTTPS
53	TCP & UDP	Outbound*	Communication to Domain Name Server

* Return traffic must be enabled.

** The maximum recommended throughput per port is 1Gbps. If more throughput is expected through the Broadcaster, additional ports for the Zixi protocol can be defined on the General page under the Settings tab.

*** 7077 and 7088 use DTLS encryption

For ZEC operating as a feeder device to a remote Zixi Broadcaster or AWS MediaConnect, the following ports must be opened on your Firewall(s) as described below:

Network Settings for ZEC as a Feeder Device

Port	Type	Direction	Description	Protocol
2088/7088***	UDP	Outbound*	Push output to a Zixi Broadcaster or AWS MediaConnect	Zixi
1935	TCP	Inbound*	Push input from RTMP enabled software	RTMP
4444	TCP	Inbound *	Web management UI	HTTP
80/443	TCP	Outbound*	Communication to Zixi License server - license.zixi.com, license2.zixi.com 52.72.218.41 34.195.97.223 3.140.62.221 3.137.16.26 ZEN Master Backend Servers 18.210.103.157 23.20.44.73 34.200.88.233 34.238.1.65 35.170.111.151 52.4.9.203	HTTP/HTTPS
53	TCP & UDP	Outbound*	Communication to Domain Name Server

* Return traffic must be enabled.

*** 7077 and 7088 use DTLS encryption

For the ZEC operating as a receiver device, the following ports must be opened on your Firewall(s) as described below:

Network Settings for ZEC as a Receiver Device

Port	Type	Direction	Description	Protocol
2077/7077 ***	UDP	Outbound*	Pull input from a Zixi Broadcaster or AWS MediaConnect	Zixi
1935	TCP	Inbound*	Push output to CDN origin server or RTMP enabled software	RTMP
7777	TCP	Inbound*	Pull output from HTML5 video player or CDN caching software	HLS or DASH
4444	TCP	Inbound*	Web management UI	HTTP
80/443	TCP	Outbound*	Communication to Zixi License server - license.zixi.com, license2.zixi.com 52.72.218.41 34.195.97.223 3.140.62.221 3.137.16.26 ZEN Master Backend Servers 18.210.103.157 23.20.44.73 34.200.88.233 34.238.1.65 35.170.111.151 52.4.9.203	HTTP/HTTPS
53	TCP & UDP	Outbound*	Communication to Domain Name Server
22	SSH	Outbound*	ZEN Master to customer's io.zixi.com server Note: This is an outbound-only, private key authenticated, SSH tunnel - no inbound rules are required

* Return traffic must be enabled.

*** 7077 and 7088 use DTLS encryption

The two APIs use different paths

API	Protocol and port	Sign-in	Route
Broadcaster API	HTTP on the Broadcaster's web port, TCP 4444 by default. HTTPS on the same port when "Use HTTPS interface for UI" is on.	A Broadcaster user account, sent as HTTP basic authentication	Straight to the Broadcaster. ZEN Master reaches it through the Broadcaster's reverse SSH tunnel.
ZEN Master API	HTTPS	An API key, in the x-api-key header	Your ZEN Master address