[NEBULA] What IPs and ports to whitelist

Curval

I just got a Zyxel AP and am very pleased with Nebula so far. In order to have it connect, I had to bypass my usual firewall SSL inspection and so on, so I wondered if anyone was able to advise what addresses and protocols are explicitly required for communication with the Nebula platform, so I am able to whitelist only that which is necessary.

Nebula_Bayardo

Take a look here 🙂

Zyxel_Barney

Hi @Curval

Name:   d.nebula.zyxel.com

Addresses: 63.35.107.114

      52.48.115.44

      52.210.12.1

      34.247.112.130

However, it is not recommended to white-list the IP addresses of our servers. Firmware upgrade, for instance, requires downloading files from a different source with changing IP.

Instead, please white-list the AP's source IP address with exceptions to the TCP ports listed on Bayardo's link.

Curval

Thanks. Do all outbound requests go to a *.zyxel.com address, even if the IPs change?

Nebula_Bayardo

Hi @Curval ,

Yes, it should be fine :)