The guest who is joining the CareAR session may find themselves in a situation where the firewall does not allow them to connect. Depending on the connection being made the below are the firewall requirements in order to connect as a guest.
CareAR Authentication Firewall Requirements
These are the connections outside of media traffic that are necessary for the optimal CareAR experience.
| Purpose | Domain | Port(s) |
| CareAR client | us-central1-carear-v0.cloudfunctions.net | 443 TCP |
| Auth | firestore.googleapis.com | 443 TCP |
| Auth | carear-v0.firebaseapp.com | 443 TCP |
| Auth | apiv2.carear.app | 443 TCP |
| Realtime database | carear-v0.firebaseio.com | 443 TCP |
| Storage | carear-v0.appspot.com | 443 TCP |
| Storage | firebasestorage.googleapis.com | 443 TCP |
| CareAR Web Portal | carear.app/* | 443 TCP |
| Session invitation | carear.page.link/* | 443 TCP |
| Session invitation | carearjoin.page.link/* | 443 TCP |
| Network Health Check | 8.8.8.8 (Google Public DNS) | ICMP |
CareAR Media Firewall Requirements (Installed Application)
When a CareAR session is initiated, all users need to establish connectivity to transmit audio between participants, the camera of the collaborator, and the annotations placed. To accomplish this portion of the session is handled with the following media connections.
| Domain | Port Type | Ports |
| *.agora.io | TCP | 53, 80, 443, 7000 - 10000, 30000 - 31000, 51000 - 52000 |
| UDP | 53, 4000-6000, 8000 - 10000 |
When using Media Geofencing your connection will utilize servers within the selected region using the *.agora.io domain.
CareAR Media Firewall Requirements (Web Application & Smart Glasses)
When joining a CareAR session as a guest (collaborator or viewer) depending on the options enabled will have additional connectivity options. These alternative options do have different ports required in order to establish media connectivity. Both the web browser application and the smart glasses application use the following to establish media:
| Domain | Port type | Ports |
|
*.agora.io |
TCP | 80; 443; 3433; 4700 - 5000; 5668; 5669; 6080; 6443; 8667; 9667; 30011 - 30013 |
| UDP | 3478; 4700 - 5000 |
CareAR System Emails
CareAR utilizes email to process certain user-initiated actions. These emails are to facilitate session invitations, new user account creation, and password resets. CareAR utilizes the following email addresses to serve these requests:
|
Email notifications |
If your email system has email filtering you may need to whitelist these addresses to assure emails do not move to spam or junk.
The CareAR System emails are generated during the following events:
|
Trigger Operation |
Sender Email Address |
Subject |
|
User Account Creation |
service@carear.com |
Welcome Email -CareAR |
|
Password Reset |
noreply@carear.com |
Reset Your Password for CareAR Account |
| Session Invite | service@carear.com | CareAR call Invite |
| Captcha | service@carear.com | CareAR Verification Code |
| Low Balance Notification | service@carear.com | CareAR-Low Balance |
Sender IP Address
Emails that are coming from the sender service@carear.com are configured to inbound from 159.183.166.109.
Bandwidth Requirements
CareAR sessions require at least 500 Kbps to maintain connection. Having more bandwidth than this can allow for an even better experience. If you would like to see data consumption over a period of time please visit our article here: Data Consumption Usage