In order for the Graphiant Edge to onboard into the Graphiant Portal and then connect into the Graphiant Stateless Core, there are certain IP addresses and ports that it needs to be able to reach. If you have a firewall front-ending the Edge please make sure to add the following rules:
Note:
All ports listed in the table are destination ports for traffic originating from the edge/site.
Protocol | Port | Action |
|---|---|---|
TCP | 53 | Accept |
UDP | 53 | Accept |
UDP | 123 | Accept |
TCP | 443 | Accept |
UDP | 500 | Accept |
UDP | 4500 | Accept |
TCP | 16000 | Accept |
The recommended approach is to allow any destination addresses for the ports mentioned above. In case your organization does not allow using any for destination addresses and, instead, requires using specific destination addresses, you may use the following:
Note:
These IP addresses are subject to change; use FQDNs where possible.
All IPs and ports listed in the table are destination IPs/ports for traffic originating from the edge/site.
Function | Protocol(s) | FQDN | IP(s) | Port(s) | Action |
|---|---|---|---|---|---|
DNS (Customizable via Local Web Server) | TCP UDP | any | any | 53 | Accept |
NTP (Customizable via Local Web Server) | UDP | any | any | 123 | Accept |
Management Plane - Onboarding Gateway | TCP | onboarding-gateway.graphiant.com | 20.81.85.173 | 16000 | Accept |
Management Plane - API Gateway | TCP | api.graphiant.com | 20.124.246.218 | 443 | Accept |
Management Plane - Logs Storage | TCP | grphntprd.blob.core.windows.net | 20.209.1.1 | 443 | Accept |
Management Plane - Software Storage | TCP | gnosimages.blob.core.windows.net | 20.209.179.97 | 443 | Accept |
Control Plane - US East | UDP | control-plane.eastus.graphiant.com | 172.173.135.142 20.169.241.10 20.25.17.100 172.190.16.69 52.188.14.101 4.246.173.214 20.121.217.131 40.76.64.106 | 4500, 500 | Accept |
Control Plane - US West | UDP | control-plane.westus.graphiant.com | 104.42.47.106 172.184.140.182 20.228.116.239 13.83.222.97 | 4500, 500 | Accept |
Data Plane - Seattle PoP | UDP | data-plane.westus.graphiant.com | 62.115.46.22 69.31.77.106 62.115.46.26 69.31.77.154 | 4500, 500 | Accept |
Data Plane - San Jose PoP | UDP | data-plane.westus2.graphiant.com | 213.248.90.158 69.31.77.145 213.248.91.138 69.31.77.150 | 4500, 500 | Accept |
Data Plane - Chicago PoP | UDP | data-plane.centralus.graphiant.com | 213.248.70.114 69.31.77.110 213.248.67.222 69.31.77.138 | 4500, 500 | Accept |
Data Plane - Dallas PoP | UDP | data-plane.centralus2.graphiant.com | 80.239.161.70 69.31.77.102 213.248.91.98 69.31.77.142 | 4500, 500 | Accept |
Data Plane - Virginia PoP | UDP | data-plane.eastus.graphiant.com | 213.248.70.106 69.31.77.158 213.248.104.170 69.31.77.98 | 4500, 500 | Accept |
Data Plane - Atlanta PoP | UDP | data-plane.eastus2.graphiant.com | 213.248.70.118 69.31.77.94 213.248.95.94 69.31.77.90 | 4500, 500 | Accept |
Data Plane - London PoP | UDP | data-plane.westeu.graphiant.com | 80.239.167.77 149.6.8.21 62.115.171.237 149.6.8.15 | 4500, 500 | Accept |
Data Plane - Frankfurt PoP | UDP | data-plane.centraleu.graphiant.com | 80.239.167.37 149.11.20.219 80.239.167.39 149.11.20.225 | 4500, 500 | Accept |
Data Plane - Tokyo PoP | UDP | data-plane.eastap.graphiant.com | 61.120.145.118 63.221.192.98 61.120.146.254 63.221.192.106 | 4500, 500 | Accept |
Data Plane - Singapore PoP | UDP | data-plane.southeastap.graphiant.com | 63.221.192.234 210.57.68.126 210.57.65.34 63.221.192.242 | 4500, 500 | Accept |
Data Plane - Sydney PoP | UDP | data-plane.southeastap2.graphiant.com | 35.244.116.24 35.197.189.120 | 4500, 500 | Accept |