Arcules is designed to make a minimal footprint on your network infrastructure, and requires a few rules to be put in place to allow us to access your gateways, with permission, as well as to apply updates to the Arcules Software, and the operating system. Some minor changes may be required on the customer’s side to ensure all of these criteria are met.

Micro Form Factor Gateways - 1.42"x7.01"x7.17"

Small Form Factor Gateways - 3.65"x11.42"x11.53"

Rack Form Factor Gateways* - 1U Rack Space, 23.45" Deep

Micro and Small Form Factor Gateways require an HDMI or Display Port connection for a monitor. Rack Form Factors require VGA connections.

*Rack Form Factor Gateways come with Dell Ready Rails for installation to a standard 4 post rack.

Gateways should be unboxed, installed, and attached to power and network prior to attempting to add the gateway to your organization, or contacting Customer Care for assistance. A USB Keyboard and monitor are required to set a Static IP Address on the gateway.

Network Architecture recommendations can be found in this Knowledge Base Article: Recommended Network Architectures

For easiest installation, the gateway should be on the network with access to the cameras, and the internet.

Micro Form Factors and Small Form Factors have a single network adapter.

Rack Form Factors come with multiple NIC's, but will require Customer Care assistance to utilize more than one NIC in order to reach a second network (i.e. NIC 1 is Internet Facing, NIC 2 is on a segregated camera network). Rack Form Factors cannot be configured for load balancing or redundancy over the network adapters.

This approach is designed to maximize security while keeping firewall configuration simple.

Arcules does not provide a complete or authoritative IP-based allowlist for gateway connectivity.

The IP ranges listed below are intended to support Arcules-managed infrastructure for upcoming platform environments only. While these ranges are sourced from our cloud provider and are generally expected to remain stable within that scope, they are not guaranteed and do not represent the full set of required endpoints.

It is important to understand that:

Requests for a complete or current IP-based allowlist cannot be fulfilled, as IP addressing for both Arcules-managed and external dependencies may change dynamically over time.

For customers operating in environments where IP-based controls are required, the following ranges may be used as a best-effort baseline for Arcules-managed infrastructure only.

Starting May 1, 2026, Arcules is introducing these ranges to support expanded platform environments. Existing allowed IPs should remain until further notice.

Important: These ranges do not cover third-party dependencies and are not sufficient on their own to ensure full functionality.

New IP ranges to allowlist:

34.54.0.144/28 – Covers IPs from 34.54.0.144 to 34.54.0.159

34.54.0.176/28 – Covers IPs from 34.54.0.176 to 34.54.0.191

34.54.0.192/28 – Covers IPs from 34.54.0.192 to 34.54.0.207

34.54.1.160/28 – Covers IPs from 34.54.1.160 to 34.54.1.175

The following domains and ports must be opened in order for the Arcules Gateway to be able to function, pull down updates, and report home for proactive monitoring.

These domains and ports must be opened so that each Gateway has access to these endpoints.

In some cases, firewalls will need the specific endpoints for WebRTC to set up rules for STUN/TURN traffic. This list is the current list of Arcules endpoints for WebRTC.

These client rules will allow for any system accessing the Arcules platform seamless usage. Any Inbound Ports associated to the requests would be client specified by the Client’s Operating System. Local Live / Local Playback feature requires clients to communicate directly to the cloud using UDP on Port 443. You cannot use Local Live / Local Playback if the client needs to go through proxies.

All of these requirements are only within your local network, and no external application of these rules are required. Due to the wide range of drivers we support, some devices and cameras may operate differently than listed below, but this captures the most universal information.

Note '~' Indicates the typical port that this operates on, and can be changed by the installer.