Firewall Requirements for Online Installs and Upgrades

For online installations and upgrades of host firmware, connection to the following domains is required during the installation or upgrade so that Universal Compute Platform can download and install the appropriate packages.

Once the stand-alone cluster is created or upgraded, internet connectivity is not required.

Note

Note

  • These requirements do not apply to offline installations and upgrades.
  • These requirements do not apply to application engine software that runs on the Self-Orchestration deployment. For example, internet connectivity is not required while installing, upgrading, or running application engines that run on the appliance (unless the specific application engine requires it, or unless you onboarded to the cloud).
Table 1. Required Connection Domains for Online Installs and Upgrades
Domain Name IP Adresses Protocol Port
docker.io Dynamic IP range HTTPS 443
gcr.io Dynamic IP range HTTPS 443
ghcr.io Dynamic IP range HTTPS 443
quay.io Dynamic IP range HTTPS 443
registry.k8s.io Dynamic IP range HTTPS 443
9041053-00 Rev. AA