Objective

This article helps you find the Twilio IP address ranges and ports you need to allow through your firewall, so your SIP infrastructure has connectivity to Twilio and Twilio has connectivity to you.

Product

Programmable Voice

Environment

Twilio Console

User Account Permission/Role(s) Required

Your user needs permission to list trunks on the account. Without it, the console shows an access-required message instead of the networking information.

Procedure

1. In the Twilio Console, select Communications in the left sidebar.
2. Select Voice, then SIP domains.
3. Select the Networking info tab.
4. Select IP Address Allowlist. The page lists the ranges to allow for SIP signalling and RTP media traffic:
   1. Media IPs, for Port Range 10000 to 60000: a single global range.
   2. Signaling IPs, for Port 5060 (UDP/TCP), 5061 (TLS): listed by region, grouped as North and South America, EMEA, and APAC.
5. If you connect to Twilio over Twilio Interconnect, select Interconnect IP Address Allowlist instead. It lists the Signaling IPs per Interconnect region — North America, Europe, and APAC — followed by the global Media IPs and an earlier set of ranges listed by region.

Additional Information

• Allowlist every range shown, not only the region closest to you. This matters if you have numbers in different regions, and for resilience — for example, if the North America Virginia gateways are unavailable, the North America Oregon gateways are used instead.
• The Networking info tab is also reachable under Communications in the left sidebar by selecting Elastic SIP Trunking, then Settings.
• For the domain URIs to point your infrastructure at, see the article on finding your SIP domain URIs for a specific Twilio region.

This content was generated by AI and reviewed, edited, and verified by a human.