Step 1 : Prepare Your AWS Account

  1. In case you are not holding an AWS account, please create one at aws.amazon.com.

  2. Use the region selector in the navigation bar to choose the AWS Region where you want to deploy the MCM9000 on AWS.

  3. Create VPC, Subnet – (Public/ Private).

  4. Create a Security group and named it 'MCM9000_SG' with the following Network allow list:

 

Protocol

Port

In/Out

Method

Notes

Special notes

HTTP

80

Both

TCP

For GUI, API, and HLS output

 

HTTPS

443

In

TCP

For GUI, API, and HLS output,

License server (Egress only) 

Required: Please add TAG License server DNS to the allow list:

  1.  

https://lic.srva.tagvs.com

  1.  

https://lic.srvb.tagvs.com

SSH

22

In

TCP

For debugging by TAG

Can remain closed and opened only for debugging sessions

FTP

21

Both

TCP

For upgrades, file upload and mosaic to FTP

Can remain closed and opened only for uploading custom images, icons, and audio files or sending the HLS output to an FTP server

Syslog

514

Out

UDP

For Syslog systems

Optional

TCP Bridge

21212

Both

TCP

For the video bridge

Optional

SRT Bridge

21211

Both

UDP

For the video bridge In a cloud environment 

Optional

RTMP

1935

In

TCP

Listening to RTMP sources

Optional

RTP

6970-6999

Both

UDP

RTP streams

Optional

SRT

0 - 65535

Both

UDP

SRT streams

Optional

Zixi

2088

Out

UDP

Feeder push to Broadcaster, Zixi protocol

Optional

Zixi

2077

In

UDP

Receiver pull from Broadcaster, Zixi protocol

Optional

Stacking

65513

Both

UDP

For stacking over multicast

Optional

TSL

8901

Both

In

For TSL

Optional

DHCP

67-68

both

UDP

Usually, open in a network by default

Optional

PTP

319-320

Both

UDP

For use of PTP

Optional

NTP

123

Both

UDP

For use of NTP

NTP time

DNS

53

Both

UDP

For use of DNS

Optional - Needed for DNS-based stream URLs

KAFKA

9092

Both

TCP

For building real-time streaming data pipelines and real-time streaming applications.

Optional