Skip to content
  • There are no suggestions because the search field is empty.

Dahua - P2P Services & Ports

Dahua's P2P protocol allows remote access to NVRs and cameras without needing to configure port forwarding on a router. It is well suited to smaller installations where a dedicated network administrator is not available. However, P2P will not function in all network environments — particularly where a firewall is filtering outbound traffic

Dahua's P2P protocol allows remote access to NVRs and cameras without needing to configure port forwarding on a router. It is well suited to smaller installations where a dedicated network administrator is not available. However, P2P will not function in all network environments — particularly where a firewall is filtering outbound traffic.

This guide explains how P2P works, when it may fail, and which ports need to be opened to restore connectivity.

Further Reading For additional detail on Dahua's P2P security practices, see the Dahua Cybersecurity Advisory (747).

How P2P Works

When a connection is initiated, the P2P protocol uses a mediator server to identify the network topology and determine how to establish the link. There are three scenarios:

🔗

Same Network

If both the device and the client are on the same local network, a direct local link is established.

🔀

One Side Behind NAT

If only one party is behind a NAT, that party actively establishes the outbound connection.

☁️

Both Sides Behind NAT

If both parties are behind a NAT, the connection is brokered through a Dahua relay server.

Important — UDP Traffic The outbound connection is established on a random UDP port. This means it is not possible to filter or restrict outbound UDP traffic and maintain P2P functionality — all outbound UDP ports must be permitted.

When P2P Will Not Work

P2P will fail when a firewall is actively filtering outbound traffic. This is most common in two situations:

  • A physical firewall appliance configured with strict outbound rules.
  • A VPN operator interconnecting multiple sites using a carrier-managed firewall.

In these environments, the required ports and protocols must be explicitly permitted for P2P to function.

Required Ports

Ask your network administrator or firewall provider to open the following ports for outbound traffic. All destinations are www.easy4ipcloud.com and www.easy4ip.com.

Service Port(s) Protocol
P2P Relay Service 8900–8903 TCP
P2P Server Service 8800–8803 TCP UDP
P2P AS Service 12366 TCP
Web Service 80 or 443 TCP
GMS Service 8180 TCP UDP
P2P Connection Traffic All ports UDP
All outbound UDP must be permitted Because P2P uses a randomly assigned UDP port for its outbound connection, no specific UDP port range can be defined. The firewall must allow all outbound UDP traffic for P2P to function reliably.

P2P Server Addresses

Ensure the following domains are reachable from the NVR. These are the servers that handle Dahua's P2P relay and connection brokering:

  • www.easy4ipcloud.com
  • www.easy4ip.com
Alternative to P2P If opening the above ports is not possible due to security policy, the recommended alternative is to configure port forwarding on the router and access the NVR directly via its public IP address or a DDNS hostname. This gives full control over access without relying on Dahua's P2P infrastructure.