---
"@context": https://schema.org
"@type": TechArticle
"@id": https://www.twilio.com/docs/global-infrastructure/firewall-configurations/media-streams-configuration#article
headline: Media Streams Configuration
description: Firewall configuration information for Voice Media Streams traffic
url: https://www.twilio.com/docs/global-infrastructure/firewall-configurations/media-streams-configuration
inLanguage: en
dateModified: 2026-03-09T18:47:22.000Z
author:
  "@type": Organization
  name: Twilio Developer Education Team
publisher:
  "@type": Organization
  name: Twilio
---

# Media Streams Configuration

Media Streams must communicate with Twilio's cloud to function properly. To ensure this, configure your firewall rules to allow secure WebSocket connections (TCP port 443) from Twilio to your WebSocket servers from any public IP address.

You must also configure your application to validate the `X-Twilio-Signature` header. This is how your application verifies that a Media Stream is coming from an authentic Twilio source. Learn more on the [General Usage - Security page](/docs/usage/security#validating-requests).