Depending on your company's Security policy (firewall, proxy), you may need to allow communication to use Dive. If Dive does not work normally, please refer to the requirements below and submit an Application to your IT department.
Communication Prerequisites
● Communication direction: Outbound only from your internal devices to external services. Inbound port opening is not required, and we do not connect to your network From our side.
● Encryption: All communication is encrypted with TLS.
● Protocol: Normal use requires TCP (HTTP/HTTPS) only. UDP is used in addition to TCP only when using Remote support (Video Call) features.
Domains That Require Allow Permissions
| Required Level | Domain | Reason |
|---|---|---|
| Essential for service use | app.divedx.com | Main server |
| firebasestorage.googleapis.com | We use Google Firebase API for Media data (Video and Image) access | |
| *.asia-southeast1.firebasedatabase.app firestore.googleapis.com |
We use Google Firebase API for database access | |
| www.googleapis.com identitytoolkit.googleapis.com securetoken.googleapis.com |
We use Google Firebase API for account authentication | |
| *.asia-northeast1.run.app | We provide server features such as Search, Translation, and AI processing on Google Cloud Run | |
| Required when using SSO (SAML/Microsoft Entra ID) | interactive-supporter-210107.firebaseapp.com | Used for passing single sign-on authentication screens |
| Required when using Alignment AR SOP | arcore.googleapis.com visualpositioning.googleapis.com |
We use Google's Alignment API |
| Required when using Remote support (Video Call) | *.agora.io *.edge.agora.io *.sd-rtn.com *.edge.sd-rtn.com *.ap.sd-rtn.com *.statscollector.sd-rtn.com *.webrtc-cloud-proxy.sd-rtn.com *.rtnsvc.com *.edge.rtnsvc.com *.rtesvc.com *.edge.rtesvc.com |
We use Agora for WebRTC service. For required ports, see "Ports Required for Remote support" below. |
| *.mapbox.com | We use Mapbox service for map display of Support Requests. If blocked, the support side cannot confirm the request location |
● Note: Since we use Google Cloud as our cloud service platform, we recommend allowing *.googleapis.com as a bulk permission. In that case, you do not need to configure each Sub domain of googleapis.com individually.
Ports Required for Remote support
Required only when using Remote support (Video Call). Audio and video prioritize UDP.
● Support side (PC web browser)
The allowlist subjects published by the provider are as follows:
TCP: 80, 443, 3433, 3478, 4700-5000, 5668, 5669, 6080, 6443, 8667, 9667, 30011-30013
UDP: 3478, 4700-5000
● Field side (Dive app on smartphone or smart glasses)
The app also connects to the same relay network as the support side (the same domain group in the table above), so please first submit an Application for the same allowlist Settings.
However, the provider does not publish an allowlist method for SDKs embedded in apps, and for environments with strict communication restrictions, it recommends a dedicated proxy method described below. Therefore, in environments with strict filtering, the allowlist above may not be sufficient for connection.
● Regarding IP address restrictions: Since relay node IP addresses are not fixed, the provider recommends allowing by domain and port rather than by IP address restriction.
If UDP Cannot Be Allowed
For environments with strict communication restrictions, the provider offers a proxy method that fixes communication to TCP/TLS 443 only and allows it via an IP address allowlist. However, the current Dive app does not Enable this method, so if UDP is completely blocked in your environment, Individual verification is required, including applicability.
Related Items to Confirm
If Remote support does not connect, the following may be the cause:
● UDP outbound communication is completely blocked
● All communication is forced Via proxy
● TLS inspection (SSL decryption) includes the above domains
Update 2026/04/25: Added firestore.googleapis.com
Update 2026/07/31: Updated Remote support (Video Call) domains and ports to the latest official provider information. Added Items for Cloud Run, SSO, and maps