1. The camera receives an IP address from the router.
2. The camera sends a request to the camagent.ufanet.ru server (94.41.0.10) on port 80 in order to find out which server it needs to connect to.
3. After receiving the necessary information (domain name or server address), the camera tries to raise a vpn tunnel to the server vts0.avucams.com (vts1.avucams.com – backup server) on port 5000. Respectively, the Source IP address will be the IP address of the WAN interface of the client’s router . (100.33.44.55 in the example).
4. At the same time, the server camagent.ufanet.ru (94.41.0.10), via port 80, sends a request to the server vts0.avucams.com (vts1.avucams.com) and adds a camera to the server config.
5. The server vts0.avucams.com (vts1.avucams.com) looks at the received config and allows the creation of a tunnel from the camera on port 5000.
6. Flussonic, on which the camera is installed, takes the stream through vts0.avucams.com (vts1.avucams.com). There is static routing between the servers vts0.avucams.ru, vts4.avucams.com and flussonnic servers, and it works in a separate VRF)
Accordingly, there should be no restrictions on port 5000 on your access network from the camera to the Internet.