Network Integration
Connections to your services
You may wish to restrict access to your services to certain users using the IP address of the client. Because web apps deployed on the Senza platform run in the cloud, requests to your services will appear to come from a data center rather than the physical location where the user is located.
The table below lists the IP address ranges from which connections will originate. If you restrict incoming access by IP address, you must update your allow list to include these ranges. You may need to do this for both your web services and any content delivery networks that you use for serving streaming video.
We'll publish notifications over email and on the Senza console home page when the list is updated.
Note on IPv6
Starting August 1, 2025, Senza clusters will default to making requests over IPv6. If your network supports IPv6 and you restrict incoming connections based on IP address, then you must add the IPv6 address ranges to your allow list in addition to the IPv4 addresses.
| Location | Protocol | IPv4 Addresses | IPv6 Addresses |
|---|---|---|---|
| Senza Core | TCP/HTTP TLS/HTTPS | 99.81.15.33/32 63.34.88.65/32 54.155.248.178/32 52.17.18.243/32 52.50.27.26/32 54.246.107.225/32 | 2a05:d018:1929:b900::/56 2a05:d018:1505:2000::/56 |
| Senza Western Europe | TCP/HTTP TLS/HTTPS | 54.78.222.165/32 52.31.150.124/32 54.194.31.251/32 63.34.130.180/32 54.77.52.137/32 54.72.59.212/32 18.97.192.120/29 18.97.192.112/29 18.175.38.211/32 13.43.14.61/32 52.56.118.2/32 18.97.192.120/29 18.97.192.112/29 34.14.0.0/28 34.39.37.48/28 | 2a05:d018:150a:9a00::/56 2a05:d018:1a2f:3d00::/56 2a05:d01c:98a:cb00::/56 2600:1900:4010:585::/64 2600:1900:40c0:34c7::/64 |
| Senza Southern Asia | TCP/HTTP TLS/HTTPS | 13.200.77.22/32 13.234.100.169/32 3.6.253.218/32 18.96.224.80/29 18.96.224.56/29 35.201.41.48/28 | 2406:da1a:f2:6300::/56 2600:1900:40a0:8d0b::/64 |
| Senza North America | TCP/HTTP TLS/HTTPS | 52.206.58.155/32 54.84.248.14/32 34.206.152.50/32 18.97.1.160/29 34.21.98.64/28 | 2600:1f18:2727:5d00::/56 2600:1900:4090:81d4::/64 |
Destination addresses and port ranges for the incoming connections are determined by the web application and the configuration of the tenant.
End-user networking requriements
Wi-Fi
The cloud connector connects to Wi-Fi using an 802.11ac connection to an access point. Senza is compatible with access points that authenticate using a password. WPS is not supported.
Wi-Fi compatibility
Some corporate environments deploy Wi-Fi security products that interfere with both the onboarding process and the operation of the device.
Home Network services
The home network needs to provide the following services for the device to operate correctly
| Network Service | |
|---|---|
| DHCP | DHCP should be provided for the device to acquire and IP address with which to operate in the home network |
| DNS | DNS servers should be provided in the DHCP response that allow the device to resolve the host addresses listed in Outbound Connectivity |
| NTP | NTP may be provided in the DHCP response. In the absence of a DHCP specified client device acquires time from |
Outbound Connectivity
The end user home network, and associated networking equipment must allow the cloud connector to communicate with the Senza Cloud at the following addresses:
| Host Address | Port | Protocol |
|---|---|---|
| signaling.active.streaming.synamedia.com | 443 | TLS/HTTPS |
| swdl-mgr.active.streaming.synamedia.com | 80 | TCP/HTTP |
| logs.prod.streaming.synamedia.com | 80 | TCP/HTTP |
| 151.139.0.0/17 | 30000-65535 | UDP |
Network Address Translation (NAT)
The cloud connector connects to the cloud service using a UDP protocol. In typical networks the device sits behind a network address translation service (NAT). NAT types are discussed in this document: NAT Types ( Cisco )
The cloud connector does not support networks that are described as :
- Port Restricted Cone
- Symmetric
Updated 2 days ago