Firewall settings

To ensure uninterrupted operation of the X‑Guard Alarm app, secure firewall configurations are essential. Below is an overview to help technical teams configure network access appropriately.

⚠️ IP addresses are subject to change. Always monitor for updates.

All traffic is encrypted using TLS 1.2 or higher, meeting Apple and Google requirements. We do not support unencrypted communication.

X-Guard Alarm App / BHV-Knop.nl App

We recommend whitelisting the primary domain x-guard.nl and all subdomains (*.x-guard.nl) to guarantee current and future connectivity.

Current endpoints in use:

DomainIP Address (IPv4 / IPv6)Notes
x-guard.nlDynamic via Cloudflare ProxyMain domain
api.x-guard.nl34.160.81.128 / 2600:1901:0\:ceb1::API endpoint
ws.api.x-guard.nl34.120.175.214 / 2600:1901:0:7849::WebSocket supported
auth.api.x-guard.nl34.102.214.191 / 2600:1901:0:592e::Authentication API
observations.api.x-guard.nl34.117.215.28 / 2600:1901:0\:e9be::Observation Gateway
report.api.x-guard.nl34.149.238.144 / 2600:1901:0:17e9::Reporting API
device-registration.edge.x-guard.nlDynamic (Heroku)WebSocket supported
tasks.x-guard.nlDynamic (Heroku)Task service

All services use TCP except audio streaming components.

Push Notification Services

PlatformServiceNotes
AndroidFirebase Cloud Messaging (FCM)Follow Google guidelines
iOSApple Push Notification Service (APNS)Follow Apple guidelines

Audio Communication – Twilio Voice

Signaling Servers (TCP 443):

DomainRegion
chunderm.gll.twilio.comGlobal
chunderm.{region}.twilio.comau1, br1, de1, ie1, jp1, sg1, us1

Media Servers (UDP 10000–20000): Primarily Frankfurt (de1) with global fallback.

Other Twilio Services:

DomainPurpose
eventgw.twilio.comEvent gateway
ers.twilio.comRegistration service

Apple-designated IPs (UDP 16384–16403):

IP Address
17.133.234.32
17.173.254.222
17.133.234.33
17.173.254.223
17.178.104.99
17.173.255.222
17.178.104.100
17.173.255.223

How to Test Voice Calling from the App:

There are three recommended ways to verify that voice communication works correctly:

  1. Install the X‑Guard Alarm app and trigger an actual test alarm.
  2. Visit https://networktest.twilio.com/ on your mobile device and run all tests.
  3. Visit https://networktest.twilio.com/?usenewvoiceips=true on your mobile device and run the alternate set of tests.

Dashboard Access

DomainIP Address (IPv4 / IPv6)Notes
manage.x-guard.nl34.102.218.140 / 2600:1901:0:4b37::Management dashboard
alarmmanager.x-guard.nl, login.x-guard.nl34.117.96.116 / 2600:1901:0\:d9d::Alarm manager portal
2023.alarmmanager.x-guard.nl34.149.69.190 / 2600:1901:0\:d5c3::Legacy alarm manager

Webhooks

Source IPProtocol
34.77.72.90IPv4
34.91.168.231IPv4

(Currently IPv4 only)