Question
What firewall settings are required for PeerIQ to upload log files and diagnostic data, and to check for and download software updates?
Answer
To support uploading log files and diagnostic data and checking for and downloading PeerIQ software and system updates, specific outbound firewall rules must be configured. The required settings vary by function and underlying operating system.
Uploads of PeerIQ logs and analytics data
PeerIQ uploads log files and analytics data to a Peer Software-managed Amazon S3 object store.
-
Ensure that PeerIQ can traverse any network address translation (NAT) policies.
-
Allow outbound HTTPS (TCP port 443) access to
s3.amazonaws.com.
Download of PeerIQ software updates
PeerIQ software updates and container images are hosted by Peer Software.
-
Allow outbound HTTPS (TCP port 443) access to the following domains:
-
https://downloads.peersoftware.com/ -
https://peerdownloads.blob.core.windows.net/(service endpoint only) -
https://peersoftware.azurecr.io(container registry endpoint)
-
These endpoints provide access to the software update packages and container images required by PeerIQ.
Download of system updates and containers
Because PeerIQ is installed on a Linux-based system, outbound access to the update servers for the supported Linux distribution is required.
-
Allow outbound HTTPS (TCP port 443) access to the appropriate update servers:
-
Ubuntu-based virtual appliance:
-
https://*.ubuntu.com
-
-
Red Hat Enterprise Linux (RHEL):
-
https://cdn.redhat.com -
https://subscription.rhsm.redhat.com
-
-
Rocky Linux:
-
https://*.rockylinux.org
-
-