1. Services to Enable
Along with the existing Content Hub services, the following domains and ports must be allowed.
Allow outbound SSL traffic on Port 7004 (TCP)
Ensure that your firewall or proxy allows encrypted traffic over TCP port 7004.
Allow these domains in your firewall or proxy settings
These domains must be allowed to ensure proper authentication and data ingestion:
*.netflix.net
*.netflix.com
*.netflixstudios.com
*.auth0.com
*.oktacdn.com
*.okta.com
*.oktapreview.com
*.cloudflare.com
ingest.sentry.io
rs.fullstory.com
💡 Tip: The * before some domains means you should allow all subdomains as well.
2. Upload Location Verification
You need to verify where you should upload the footage:
- Log in to Netflix Content Hub and check the assigned upload location.
- After confirming the upload location, ensure it is added to your allow list.
To confirm the upload location that is assigned to your specific project:
In your project, click the gear icon located in the left-hand navigation menu.
Figure A
Under the General section, locate the Media Workflows & Algorithms subsection. Here, you'll find the details of your upload location.
Figure B
3. IP Address Allow List on Port 33001
The following IP address ranges must be allowed for outbound connections on port 33001.
| Region | IP Range |
| Madrid |
192.173.101.32/27 |
| London | 192.173.109.32/27 |
| New York | 192.173.110.32/27 |
| Los Angeles | 192.173.87.32/27 |
| Mumbai | 192.173.98.32/27 |
| Tokyo |
192.173.102.32/27 |
💡 Note:
- The /27 means each region has 32 IP addresses in that range.
- If your network filtering system requires individual IPs instead of a range, you may need to expand the range into specific IPs.
4. Verification Steps
4.1 Validate Domain Resolution
Ensure your system can resolve Netflix services:
nslookup log-publish-external.prod.netflix.net
If using Linux/macOS:
dig log-publish-external.prod.netflix.net
4.2 Check Connectivity to Netflix Logging Service (Port 7004, TCP)
Use netcat (nc) or telnet to confirm that the logging endpoint is reachable.
Option 1: Using netcat (Preferred)
nc -zv log-publish-external.prod.netflix.net 7004
✅ If successful, you will see:
Connection to log-publish-external.prod.netflix.net port 7004 succeeded!
Option 2: Using telnet (TCP Only)
telnet log-publish-external.prod.netflix.net 7004
If successful, it will return:
Connected to log-publish-external.prod.netflix.net
Escape character is '^]'.
Press CTRL + ], type quit, and press Enter to exit.
4.3 Check Connectivity to Upload Locations (Port 33001, TCP/UDP)
Each Netflix ingest region requires TCP/UDP connectivity on port 33001.
Check UDP (Preferred for upload)
nc -zuv 192.173.87.34 33001
✅ If successful:
Connection to 192.173.87.34 port 33001 [udp/*] succeeded!
Check TCP
nc -zv 192.173.87.34 33001
✅ If successful:
Connection to 192.173.87.34 port 33001 [tcp/*] succeeded!
Alternative: Using telnet (TCP Only)
telnet 192.173.87.34 33001
If successful, it will return:
Connected to 192.173.87.34.
5. Need Help?
- If you don’t have access to change firewall settings, contact your Network/Security team.
- If Content Hub doesn’t show your upload location, check your Netflix documentation or contact the MPS Support team using the “Contact Support” button in your app or on the Content Hub webpage.
- If you have any other questions or are unclear about anything listed above please feel free to contact the MPS Support team for further assistance using the “Contact Support” button. If you do not have access to the “Contact Support” button you can always reach the MPS Support team at netflixprodhelp@netflix.com