Firewall Rules:

Change log:

03/02/2023 :

time.android.com

- ip-api.com

23/03/2023 :

-mqtt.esper.cloud

FQDNs
Explantation
Ports
mqtt.shoonyacloud.com
Cloud to device communication
1883
turn.shoonyacloud.com
Remote Viewerd
TCP: 3478, 5349
UDP: 3478, 5349,
49152-65535
qhavr-api.esper.cloud
For devices to communicate back to Endpoints/Stacks.
TCP: 443
qhavr.esper.cloud
Grants access to the Esper Console when operating under a network with a restricted outbound firewall
TCP : 443 (HTTPS)
dpcdownloads.esper.cloud
Needed during the provisioning process to download dpc (in case of 6-tap), helper and RV apk download.
TCP: 443
services.shoonyacloud.com
Needed to fetch the latest RV and helper versions and their URLs.

**Also needed for IMEI/Serial based provisioning
TCP: 80 (HTTPS)
TCP: 443 (HTTPS)
streamer.esper.io
File transfer service from AWS
TCP: 443
13.52.132.230
Remote adb service
TCP: 40000 - 50000
mqtt-telemetry-prod.esper.cloud
Deep telemetry services from device
TCP: 1883
mqtt.esper.cloud
For MQTT communication to devices for commands (with TLS)
TCP:8883 (MQTT over ssl)
8.8.8.8
Google DNS server to check internet connectivity on the device
443
firebaseinstallations
.googleapis.
comfcm.googleapis.com
Backup channel, also used for ping command to wake up a device (Only for GMS devices)
TCP: 443 (HTTPS)

TCP: 5228 (HTTPS)

TCP: 5229 (HTTPS)

TCP: 5230 (HTTPS)
IP: 13.52.132.230
For allowing secure remote ADB access to your devices
TCP: 40000-50000

work in progress:

Old main rules

FQDNs
Features
Ports
*.amazonaws.com
For provisioning, app management and device managemen
TCP: 443 (HTTPS),

TCP: 8883 (MQTT),
For MQTT communication with devices
TCP: 1883 (MQTT)
Provisioning services and Remote Viewer
APK
TCP: 443 (HTTPS)
For Remote Viewer and Remote Control services
TCP/UDP: 3478 (SCTP),
TCP/UDP: 5349 (SCTP),
UDP: 49152 - 65535
dpcdownloads.esper.cloud
For the 6-tap QR code method of provisioning and Remote Viewer APK
TCP: 443(HTTPS)
qhavr.esper.cloud
Grants access to the Esper Console when operating under a network with a restricted outbound firewall
TCP: 443 (HTTPS)
qhavr-api.esper.cloud
For communicating from the device to the Esper Endpoint. (example: device status events and command success/failure messages)
TCP: 443 (HTTPS)
mqtt-telemetry-prod.esper.cloud
Deep telemetry from devices
TCP: 1883 (MQTT)
mqtt.esper.cloud
For MQTT communication to devices for commands (with TLS)
TCP: 8883 (MQTT over ssl)
IP: 13.52.132.230
For allowing secure remote ADB access to your devices
TCP: 40000 - 50000
firebaseinstallations
.googleapis.com and fcm.googleapis.com
Backup channel, also used for ping command to wake up a device (Only for GMS devices)
TCP: 443 (HTTPS),

TCP: 5228 (HTTPS),

TCP: 5229 (HTTPS),

TCP: 5230 (HTTPS)
IP: 8.8.8.8
For verifying internet connectivity on the device
TCP: 443 (HTTPS)
time.android.com
Used to actively synchronize the device's time.
UDP: 123 NTP(SNTP)
ip-api.com
Used when the OS boots for the first time (post-installation) to set up the timezone.
TCP: 444 (HTTP)