Firewall Requirements

The following connections are required during installation and upgrades so that Universal Compute Platform can download the appropriate packages.

Table 1. Required Connections for Installs and Upgrades
Domain Name	IP Adresses	Protocol	Port
docker.io	Dynamic IP range	HTTPS	443
gcr.io	Dynamic IP range	HTTPS	443

Internet connectivity is required in these situations:

During installation and setup of the Universal Compute Platform appliance, up to and including the creation of the stand-alone cluster.
Upgrades of Universal Compute Platform applicance software.
For Cloud Connected use cases, connectivity to ExtremeCloud IQ services is required to facilitate the onboarding. For details, see Required Connections for Cloud Deployments.

Once the stand-alone cluster is created, internet connectivity is not required while installing, upgrading, or running application engines that run on the appliance (unless the specific application engine requires it, or unless you onboarded to the cloud).

Note

If the appliance is to be deployed as an air gap use case, the initial configuration of the host needs to take place in a staging location where internet services are available (for example, DNS, NTP and Docker access). Once the node is initialized to support the target application, the appliance can be moved to its target location.

The following connections are required if you connect to ExtremeCloud IQ.

Table 2. Required Connections for Cloud Deployments
Domain Name	IP Addresses	Protocol	Port	Description
hac.extremecloudiq.com	34.253.190.192 ~ 34.253.190.255	HTTPS	443	Onboarding to ExtremeCloud IQ
<rdc>-inlets.extremecloudiq.com	Dynamic IP range	TCP	8090	Ongoing connection to ExtremeCloud IQ