Firewall configuration

During installation, configure the following domains for your firewall so that your online installation of the CylanceHYBRID application succeeds. All outbound connections are using TCP port 443.

For an online installation, you must make the amazonaws.com domain accessible. For an offline installation, you can only configure the amazonaws.com domain for your firewall. You can copy the IP ranges to allow from this JSON file. For more information, see AWS IP address ranges.

You must also make the following domains accessible for an online installation:
  • hub.docker.com
  • k8s.gcr.io
  • registry.k8s.io

Domain

IP Address

kurl.sh

162.159.135.41

162.159.136.41

k8s.kurl.sh

50.19.197.213

54.236.144.143

162.159.135.41

162.159.136.41

replicated.app

162.159.133.41

162.159.134.41

2606:4700:7::a29f:8529

2606:4700:7::a29f:8629

api.replicated.com

162.159.137.43

162.159.138.43

2606:4700:7::a29f:892b

2606:4700:7::a29f:8a2b

get.replicated.com

34.194.217.225

34.200.116.158

162.159.137.43

162.159.138.43

2606:4700:7::a29f:892b

2606:4700:7::a29f:8a2b

proxy.replicated.com

162.159.137.43

162.159.138.43

2606:4700:7::a29f:892b

2606:4700:7::a29f:8a2b

registry.replicated.com

162.159.137.43

162.159.138.43

2606:4700:7::a29f:892b

2606:4700:7::a29f:8a2b

registry-data.replicated.com

This domain resolves to Amazon CloudFront addresses which may change periodically.