Network Whitelist Registration
This document is a machine-translated draft and is currently undergoing review. Some content may be inaccurate or differ from the original Korean version. For the most precise information, refer to the Korean documentation.
This is a firewall blocking response guide for when Kollus Player playback functionality and server-to-server callback communication are blocked in special network environments with strict firewall security policies, such as corporate intranets or school networks.
Symptoms
- Video playback errors occur only in specific corporate or school network environments.
- Switching to a smartphone personal hotspot (cellular data) network and retesting results in normal playback.
-
Error codes
- DNS resolution failure: -8006, -9006, -10006
- Connection refused: -8007, -9007, -10007
Classification of blocking entities by error type
The whitelist registration target and the party responsible for action differ depending on the type of error that occurs.
| Error type | Description | Whitelist registration location |
|---|---|---|
| Player playback error | The user's device fails to access the Kollus CDN and streaming servers. | User's corporate/school network (A domain allowance request must be submitted to the institution's firewall management department) |
| Callback server access error | The Kollus gateway server is blocked when sending verification requests to the customer's callback URL. | Customer's backend callback receiving server (Kollus server IPs must be allowed in the firewall policy in front of the server) |
Player playback error (configure allowed playback domains)
In the firewall settings of the corporate or school network the user is on, outbound communication to the following domain ranges must be permitted.
| Domain pattern | Purpose |
|---|---|
*.kollus.com | Kollus Player, CDN, and all APIs |
*.catenoid.net | Kollus service infrastructure |
license.pallycon.com | Multi DRM (Widevine/FairPlay/PlayReady) license server |
*.pallycon.com | All DoveRunner license-related |
- Fixed IP list information: If your firewall policy requires exact physical IP address ranges rather than domains, contact Technical Support(tech_support@catenoid.net) to receive the latest IP list.
"To enable video viewing through Kollus Player, please allow outbound HTTP/HTTPS (ports 80 and 443) connections to the
*.kollus.com,*.catenoid.net, and*.pallycon.comdomain ranges."
Callback server access error (allow callback receiving server ips)
If the customer's callback receiving server (the DRM download callback and playback callback URL endpoints) is protected by a firewall, it must be configured to accept inbound authentication request packets originating from Kollus servers.
If you need the latest fixed IP list for Kollus outgoing servers, please contact Technical Support(tech_support@catenoid.net). Note that the IP list is subject to change based on infrastructure expansion and equipment change policies. Therefore, using a domain-based whitelist (SNI filtering specification) is more stable.
Step-by-step firewall diagnostic guide
When a user reports that "video does not play only in a specific corporate or school network environment," run the following terminal commands in order on a PC inside that network to verify whether communication is being blocked.
- Verify Kollus streaming domain resolution (run from inside the target network environment)
nslookup v.kr.kollus.com
nslookup edge-kr.kollus.com
- Verify HTTP/HTTPS protocol connectivity
curl -I https://v.kr.kollus.com
- Verify Multi DRM license domain resolution (run if using a Multi DRM-integrated channel)
nslookup license.pallycon.com
- Result interpretation: If running the commands returns no system response packet or a Timeout error is detected, the network firewall at the institution currently in use is blocking communication to that domain.
Precautions
- Possibility of temporary name server failure: If the issue appears to resolve temporarily right after a user switches wireless Wi-Fi networks or modifies the local DNS server settings on their device, this is more likely a temporary DNS failure on the device itself rather than a firewall block.
- Exception handling for enterprise security solutions: If a web filtering solution, DLP (Data Loss Prevention system), or SSL interception program is continuously running in the corporate intranet environment and inspecting HTTPS traffic, additional exception handling must be integrated.
- SSL interception bypass configuration required: In special environments where SSL interception is enabled, DRM license requests may be blocked, so domains related to Kollus and DoveRunner must be registered as SSL inspection bypass (Bypass) targets.