Facilities   Products
 

 

 
SightSpeed

Firewall Friendliness

« Browser Compatibility | Main | Setup - Installation »

SightSpeed uses the industry standard UDP/IP packet to encapsulate its proprietary protocol for all data transmissions.

This low-overhead method of data streaming provides for fast transmission, as well as being in a format that every firewall understands without requiring any add-in modules or special gateways.

Additionally, SightSpeed only uses one port for all communications.

By using the baseline industry standard UDP protocol, all stateful firewalls can be modified with minimal changes to support SightSpeed if they are not supported by the default rule set.

Specifically, stateful firewalls need to allow outgoing UDP packets from source port 9000 on the internal interface, the associated return traffic will be accepted if the return “traffic allow” window is configured to be at least 30 seconds in length.

SightSpeed is also able to negotiate most NAT devices by using a proprietary real-time method of firewall analysis.

A 99% connection success rate can be achieved with a properly configured firewall. As mentioned above, a properly configured firewall consists of a global ‘Allow from internal UDP source port 9000’ rule.

These rules functions properly since the SightSpeed software always sends traffic from UDP port 9000.

SightSpeed uses port 9000 by default, but this number can be changed to any port the Network Administrator deems viable.

A port forward rule on the NAT device will automatically forward all incoming port 9000 traffic to the internal machine specified. SightSpeed recommends only using a port forward rule for machines that reside in a DMZ.

Please note that if more than one person inside the NAT device is using SightSpeed, then different port numbers must be specified in the NAT device and the SightSpeed software for each unique computer.


The Directory Server
In order to initiate a peer-to-peer video call, SightSpeed determines several pieces of information about both parties’ network connections.

SightSpeed has developed a directory server to make this process transparent for the user while providing very high connection success rates.

When SightSpeed is installed on a computer, the user is registered with SightSpeed’s global directory.

Users manage their SightSpeed contact list similar to “buddy lists” found in text based Instant Messaging applications.

A real-time video call is initiated with only one click on the contact’s name. The directory information is passed to the SightSpeed server using the same standard IP UDP packet that is used in the peer-to-peer data stream.

 

« Browser Compatibility | Main | Setup - Installation »


Posted on December 10, 2003 at 05:09 PM

Updated on December 10, 2003 at 06:06 PM

 

 

Firewall Friendliness

 

 

SightSpeed

 

About | Full Guide Access | Table of Contents | Last Updates Last Updates Of Robin Good's Official Guide To Web Conferencing