This is our NEW IT Team Guide to be used for new customers starting October 1st, 2024. If you are an existing customer looking for the IT Team guide between Sept 18th and October 1st, please refer to this article.
Flo Recruit is widely used by law schools and law firms to conduct virtual interviews and virtual networking events. Video calls on Flo Recruit work directly in your browser, and do not require users to download anything.
We use the Daily API for video chat, which is built on WebRTC. All conversations are established by making a UDP connection to Daily’s forwarding servers. While our video calls are easy to use, your organization may require some additional firewall configuration by your IT team.
Network Configuration
To ensure video calls work properly, your network's firewall needs to be configured accordingly. Your IT team may need to whitelist specific domains:
Domains to Whitelist:
*.daily.co
*.wss.daily.co
prod-ks.pluot.blue (Note:pluot.blue is a secondary domain used for HTTP/REST infrastructure and encrypted TURN relay services. In the U.S., Twilio and Xirsys are two providers used for encrypted TURN video/audio relay.)
Static IP Addresses:
If your firewall requires whitelisting static IP addresses for non-standard ports (beyond TCP/443), please refer to the list of IPs provided by Daily at https://ip-info.daily.co/ips/ip-info.json. For the IPs in this list, both forward and reverse DNS lookup are provisioned and matching.
Port Configuration:
VPN Considerations:
For participants using VPNs, it is important for call quality that the video and audio streams are not routed through the VPN. Either exempt UDP traffic from VPN routing, or exempt TCP port 443 for the Twilio IP address blocks (see below). A PDF detailing how to disconnect your VPN is attached at the end of this article, which can be shared with interviewers.
TURN Server Fallback:
If direct UDP transport between clients and the Daily infrastructure is blocked, media traffic will be routed through TURN servers managed by our commercial partners. In the U.S., Twilio provides this relay capability (Note: this part of the configuration is optional if you have whitelisted the fixed IPs above).
TURN is part of the Web RTC video standard. If the Twilio TURN infrastructure is accessible to all clients in a Daily video call in the US, the call will work. Routing through TURN servers forces an additional network hop, which is not ideal, but the overall quality difference for the call is usually not too large. For more details on Twilio’s TURN servers, visit https://www.twilio.com/docs/stun-turn/regions.
If you did not opt to whitelist the fixed IPs above, please whitelist the following domains:
*.twilio.com
*.xirsys.com
Alternatively, here are the Twilio TURN server IP ranges for U.S.
regions:
US East Coast (Virginia)
34.203.254.0 - 34.203.254.255
54.172.60.0 - 54.172.61.255
34.203.250.0 - 34.203.251.255
3.235.111.128 - 3.235.111.255
US West Coast (Oregon)
34.216.110.128 - 34.216.110.159
54.244.51.0 - 54.244.51.255
44.234.69.0 - 44.234.69.127
Ports used:
443(TCP)
3478(TCPandUDP)
5349(TCP)
10,000-60,000(UDP)
Xirsys IP Addresses:
Please also whitelist the US region IP addresses for Xirsys found at this link: https://docs.xirsys.com/?pg=ip-whitelist
Book a test call with us here after following the steps above. To ensure that your organization can use Flo Recruit's video conferencing smoothly, we would like this test to be with at least two members of your organization: one member accessing this from the office and one from a remote environment. This test will be facilitated by a Flo Recruit team member.
Email Communications
Whitelist the email domain @floevents.email. We use this domain exclusively for important email notifications, like links to video chat portals and last minute schedule changes.
To allow emails to be received from Flo Recruit, whitelist the following IP Addresses:
149.72.33.196
129.213.22.154
155.248.199.62
Security
Why partner with Flo Recruit? We prioritize Security. Read more here.
How to Disconnect a VPN