Network Diagram la Vitre - IT Services

✨ Network Technical Documentation
This document details the network architecture and data flows of la Vitre for client IT services. It covers network requirements, protocols used, and security considerations.

Get closer, it changes everything.

General Architecture¶

Physical Components¶

graph TB
    A[la Vitre Site A] -->|Ethernet/WiFi| B[Network Infrastructure]
    C[la Vitre Site B] -->|Ethernet/WiFi| B
    D[Le Compagnon Mobile] -->|WiFi/4G/5G| B
    E[Le Compagnon Web] -->|Ethernet/WiFi| B
    F[Admin Portal] -->|Ethernet/WiFi| B

    B -->|Internet| G[la Vitre Servers]
    G --> H[Authentication Service]
    G --> I[Video Routing Service]
    G --> J[Administration Service]

Software Components¶

On each la Vitre:

Windows Mini-PC: Main host
la Vitre Application: Main user interface
HD Camera: Incoming video stream
Microphone: Incoming audio stream
Speakers: Outgoing audio stream
86-inch Display: Video display

Detailed Data Flows¶

1. Inter-Vitre Communication¶

sequenceDiagram
    participant VA as la Vitre Site A
    participant SV as la Vitre Servers
    participant VB as la Vitre Site B

    VA->>SV: Connection request (HTTPS)
    SV->>VA: Authentication (TLS 1.3)
    SV<<->>VA: Websocket Connection
    VA->>SV: Send connection endpoints (Signaling)
    SV->>VB: Notification new la Vitre available in space
    VB->>SV: Send connection endpoints (Signaling)
    SV->>VA: Send connection endpoints of other Vitres

    Note over VA,VB: WebRTC Connection Establishment
    VA<<->>VB: Audio/video streams (SRTP / WebRTC)
    VA<<->>VB: Annotations (DTLS / WebRTC)
    VA<<->>VB: Screen sharing (SRTP / WebRTC)

2. The Companion Connection¶

sequenceDiagram
    participant C as Le Compagnon
    participant V as Local la Vitre
    participant S as la Vitre Servers

    V->>C: QR Code Scan / Temporary code
    C->>S: Code + authentication
    S->>C: Authentication validation
    S<<->>C: Websocket Connection

    C->>S: Send connection endpoints (Signaling - Host / Relay / Reflexive)
    S->>V: Compagnon connection notification
    V->>S: Send connection endpoints (Signaling - Host / Relay / Reflexive)
    S->>C: Send la Vitre connection endpoints

    Note over C,V: WebRTC Connection established
    C->>V: Mobile screen sharing (SRTP / WebRTC)
    C->>V: Mobile camera stream (SRTP / WebRTC)
    C<<->>V: Real-time annotations (DTLS / WebRTC)

Technical Specifications¶

Network Requirements¶

Component	Bandwidth	Protocol	Port	Criticality
Main HD Video	3 Mbps	SRTP/WebRTC/UDP	Dynamic	Critical
Audio	0.5 Mbps	SRTP/WebRTC/UDP	Dynamic	Critical
Signaling/Control	0.5 Mbps	HTTPS/TCP	443	Critical
Screen Sharing	1-2 Mbps	SRTP/WebRTC/UDP	Dynamic	Normal
Translation	0.1 Mbps	HTTPS/TCP	443	Optional
Administration	0.1 Mbps	HTTPS/TCP	443	Low

Recommended total: 5 Mbps minimum per la Vitre

Protocols Used¶

Secure Transport:

SRTP (Secure Real-Time Protocol): End-to-end audio/video encryption
TLS 1.3: HTTPS connection security
WebRTC: Peer-to-peer communication for screen sharing
WebSocket Secure (WSS): Real-time bidirectional communication

Authentication:

OAuth 2.0: User authentication
JWT (JSON Web Tokens): Secure sessions
SSO (Single Sign-On): Enterprise integration

Firewall Configuration¶

Ports to Open (Outbound)¶

# API
lavit.re, *.lavit.re → https TCP 443
insights.lavit.re → https TCP 443

# TURN / STUN
turn.lavit.re → 443, / TCP & UDP
stun.lavit.re → 443 / TCP & UDP
*.relay.lavit.re → 443 / TCP & UDP

# Static Content
storage.lavit.re → https TCP 443
*.extensions.lavit.re, extensions.lavit.re → https TCP 443
*.apps.lavit.re, apps.lavit.re → https TCP 443
*.lavitre.space, lavitre.space → https TCP 443
*.lavitre.me, lavitre.me → https TCP 443

# Translation app
*.api.cognitive.microsoft.com → https TCP 443
*.cognitiveservices.azure.com → https TCP 443
*.speech.microsoft.com → https TCP 443

SSL/TLS Certificates¶

Let's Encrypt Certificates: Automatically renewed
Validity: 90 days with automatic renewal
Encryption: TLS 1.3 minimum, elliptic curves
HSTS: Enforced on all domains

Security and Encryption¶

Stream Encryption¶

graph LR
    A[la Vitre A] -->|SRTP AES-256| B[Internet]
    B -->|SRTP AES-256| C[la Vitre B]

    D[Le Compagnon] -->|TLS 1.3| B
    B -->|WebRTC DTLS| D

    E[Admin] -->|HTTPS TLS 1.3| B
    B -->|Signed JWT| E

Encryption Algorithms¶

API Ciphers:

TLS_AES_256_GCM_SHA384 (TLS 1.3 only)
TLS_AES_128_GCM_SHA256 (TLS 1.3 only)
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
TLS_DHE_RSA_WITH_AES_128_GCM_SHA256

WebRTC Ciphers:

TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

Quality of Service (QoS)¶

Traffic Priorities¶

Class	Traffic	DSCP	Max Latency	Max Jitter
Real-time	Audio	EF (46)	20ms	5ms
Video	Video	AF41 (34)	50ms	10ms
Interactive	Signaling	AF31 (26)	100ms	20ms
Data	Screen sharing	AF21 (18)	200ms	50ms

Recommended QoS Configuration¶

# Cisco configuration example
class-map match-any VITRE-VOICE
  match dscp ef
  match protocol rtp audio

class-map match-any VITRE-VIDEO  
  match dscp af41
  match protocol rtp video

policy-map VITRE-QOS
  class VITRE-VOICE
    priority percent 20
  class VITRE-VIDEO
    bandwidth percent 60
  class class-default
    fair-queue

Monitoring and Diagnostics¶

Metrics to Monitor¶

Network:

Latency: < 50ms recommended
Jitter: < 10ms for audio/video
Packet Loss: < 0.1%
Available Bandwidth: > 5 Mbps

Application:

Video Quality: Resolution, frame rate
Audio Quality: Clarity, synchronization
Connection Time: < 5 seconds

Diagnostic Tools¶

Built-in Tests: Available in admin interface
Detailed Logs: Accessible via admin portal
Real-time Metrics: Session monitoring

Supported Network Topologies¶

Scenario 1: Simple Site-to-Site¶

graph LR
    A[Site A<br/>la Vitre 1] -->|Internet<br/>5 Mbps| B[ISP Router]
    B --> C[Internet]
    C --> D[ISP Router]
    D -->|Internet<br/>5 Mbps| E[Site B<br/>la Vitre 2]

Scenario 2: Multi-site with Central Hub¶

graph TB
    A[Headquarters<br/>Hub la Vitre] --> B[Internet]

    C[Branch 1<br/>la Vitre] --> B
    D[Branch 2<br/>la Vitre] --> B  
    E[Branch 3<br/>la Vitre] --> B
    F[Partner<br/>Le Compagnon] --> B

    B --> G[la Vitre Servers]

Scenario 3: Integration with the Companion¶

graph TB
    A[Mobile User] -->|4G/5G/WiFi| B[Internet]
    C[Office la Vitre] -->|Ethernet| D[Enterprise Network]
    D --> B
    B --> E[la Vitre Servers]

    F[Remote User] -->|WiFi| B
    G[Nomadic User] -->|4G/5G| B

Deployment Considerations¶

Enterprise Networks¶

Proxies and Firewalls:

Proxy Authentication: Supported (Basic)
SSL Inspection: Compatible if certificates are accepted
DPI (Deep Packet Inspection): Transparent for SRTP

NAT and Address Translation:

Simple NAT: Automatically supported
Symmetric NAT: Requires TURN servers
Multiple NAT Levels: Supported via ICE/STUN

Complex Networks¶

MPLS:

Compatible with existing MPLS networks
Service class preservation
VRF (Virtual Routing and Forwarding) support

SD-WAN:

Integration with major SD-WAN solutions
Automatic path optimization
Automatic failover to secondary links

✨ Missing information?
This Help Center evolves with your needs.

Let us know which terms, features, or use cases should be clarified, or contact support for personalized assistance.

Bringing you closer to what matters. We are enriching this resource together.