Audio and video calls for small teams
Calls in the browser and in the app. Audio and video are encrypted end to end and relayed through our media servers in the Netherlands, so calls work even on networks that only allow HTTPS.
What Trafoid does
End-to-end encryption
Media is encrypted with keys known only to participants’ devices. The server relays packets it cannot read.
Works over port 443
A call is a single TLS connection to the media server. No UDP ports to open on the office network.
Mobile networks
Adaptive bitrate and fast reconnection keep the call going when you move from Wi-Fi to LTE.
Nothing recorded
We do not record or store calls. Technical connection logs are deleted after 14 days.
Network requirements
| Purpose | Host | Port | Required |
|---|---|---|---|
| Website and web client | trafoid.com | TCP 443 | yes |
| Media relay over TLS | media.trafoid.com | TCP 443 | yes |
| Media relay, UDP | media.trafoid.com | UDP 3478, 49152–55535 | no |
Each participant keeps one long-lived TLS session to media.trafoid.com
for the whole call: 40–100 kbit/s each way for audio, 0.5–2.5 Mbit/s for video. Please do not limit TLS session
length or intercept TLS for this host.
Security
TLS 1.2/1.3 to the media server, DTLS-SRTP end-to-end encryption between devices. The relay only accepts authenticated team credentials and forwards traffic to public addresses only. Report issues to security@trafoid.com.