Remotle: Network Requirements

This page lists the network access Remotle needs. It is for IT teams setting firewall, proxy and web-filter rules.

No inbound ports

Remotle never needs an inbound port, on your devices or on your workstations. Every connection is made outbound. Workstations do not listen on any port.

---

Ports

Protocol	Port	Direction	Purpose
TCP	443	Outbound	Sign-in, workstation list, updates, logs
TCP	9443	Outbound	Connection set-up
UDP	4443	Outbound	Session traffic through a Computle relay
UDP	3478	Outbound	Network address discovery (STUN)
UDP	Any high port	Outbound	Direct session traffic between your device and your workstation, when the network allows it

UDP is required

The session itself is carried over UDP. A network that allows only TCP, or only traffic through a web proxy, can sign in but cannot start a session.

---

Domains

Allow these from user devices:

Domain	Port	Purpose
auth.computle.com	TCP 443	Sign-in
asmgr.computle.com	TCP 443	Workstation list and connection authorisation
portal.computle.com	TCP 443	Portal, problem reports
updates.computle.com	TCP 443	Updates
softwaredownloads.oncomputle.com	TCP 443	Installers and release notes
logs.svc.broker.computle.com	TCP 443	Logs
login.microsoftonline.com, login.microsoft.com, graph.microsoft.com	TCP 443	Microsoft sign-in

Allow these from workstations:

Domain	Port	Purpose
updates.computle.com	TCP 443	Updates
*.r2.cloudflarestorage.com, storage.googleapis.com, *.blob.core.windows.net	TCP 443	Update downloads and update verification
keygen.computle.com	TCP 443	Licence check
*.id.computle.net	TCP 443	Workstation identity and Single Sign-On
logs.svc.broker.computle.com	TCP 443	Logs

---

Connection services

User devices and workstations both connect to these.

Connection set-up

Host name	Address	Port
rdv-ths-1.prod.computle.com	91.198.40.247	TCP 443 and 9443
rdv-uka-1.prod.computle.com	194.4.152.76	TCP 443 and 9443

Relays

Host name	Address	Port
relay-ths-1.svc.broker.computle.com	91.198.40.50	UDP 4443
relay-uka-1.svc.broker.computle.com	194.4.152.50	UDP 4443
relay-uka-2.svc.broker.computle.com	194.4.152.51	UDP 4443
relay-ukb-1.svc.broker.computle.com	151.243.39.160	UDP 4443
relay-ukb-2.svc.broker.computle.com	151.243.39.161	UDP 4443

Network address discovery

Host name	Port
stun.cloudflare.com	UDP 3478

Rules written against host names keep working when Computle adds a relay under *.svc.broker.computle.com. Rules written against addresses need updating when this page changes.

---

Proxies and TLS inspection

• Sign-in, updates and problem reports use the system proxy.
• Connection set-up and session traffic do not use a proxy. Allow them directly.
• Connection set-up works through TLS inspection if the inspecting certificate is trusted by the device.
• Workstation traffic to updates.computle.com, *.id.computle.net and *.svc.broker.computle.com uses certificate authentication and must be excluded from TLS inspection.
• Session traffic is encrypted end to end and cannot be inspected.

---

Bandwidth

Remotle adjusts the picture to the connection. As a guide, at full quality each screen uses up to:

Resolution	Bitrate
1920 x 1080	25 Mbps
2560 x 1440	40 Mbps
3840 x 2160	80 Mbps

On a slower connection, choose the Smooth preset in the session menu. Smooth is designed for connections under 5 Mbps.

---

Testing

On a Windows, Mac or Linux device, open Settings, Diagnostics and click Run Test. Remotle checks every service this device needs and groups the results under This device, Services, Rendezvous, Relays and STUN / Your network. See Diagnostics.