Last updated: December 6, 2023
The following requirements are subject to change:
| Hostname | Port (protocol) |
Comment |
| *.cdn.snapcraft.io | 443 (TCP) | Required for Ubuntu Core Operating System |
| sentry.screenlyapp.com | 443 (TCP) | Used for error tracking and monitoring |
| api.screenlyapp.com | 443 (TCP) | Used for talking to our API |
| mtls.screenlyapp.com | 443 (TCP) | Alternative path to API |
| *.snapcraft.io | 443 (TCP) | Required for Ubuntu Core Operating System |
| google.com | (ICMP) | Network check |
| 8.8.8.8 | (ICMP) | Network check |
| login.screenlyapp.com | 443 (TCP) | To access Screenly services |
| login.ubuntu.com | 443 (TCP) | Required for Ubuntu Core Operating System |
| myapps.developer.ubuntu.com | 443 (TCP) | Required for Ubuntu Core Operating System |
| ntp.ubuntu.com | 123 (UDP/TCP) | Required for synchronizing time with Ubuntu NTP servers |
| search.apps.ubuntu.com | 443 (TCP) | Required for Ubuntu Core Operating System |
| serial-vault-partners.canonical.com | 443 (TCP) | Needed for the initial link with Ubuntu's application store |
| snapcraft.io | 443 (TCP) | Required for Ubuntu Core Operating System |
| us-assets.screenlyapp.com | 443 (TCP) | Used for storing assets |
| ws.screenlyapp.com | 443 (TCP) | Needed for web socket connections for real-time updates on players |
| mqtt.screenlyapp.com | 443 (TCP) | Future use - Needed for real-time updates/possible replacement for websocket |
| mqtt.screenlyapp.com | 8883 (TCP) | Future use - Needed for real-time updates/possible replacement for websocket |
| public.apps.ubuntu.com | 443 (TCP) | Required for Ubuntu Core Operating System |
| upload.apps.ubuntu.com | 443 (TCP) | Required for Ubuntu Core Operating System |
| *.snapcraftcontent.com | 443 (TCP) | Required for Ubuntu Core Operating System |
| vpn.screenlyapp.com | 51820 (UDP) | Future use - Alternative communication channel |
The specific *.snapcraftcontent.com domains are the following:
| Hostname |
| storage.snapcraftcontent.com |
| canonical-lgw01.cdn.snapcraftcontent.com |
| canonical-lcy01.cdn.snapcraftcontent.com |
| canonical-lcy02.cdn.snapcraftcontent.com |
| canonical-bos01.cdn.snapcraftcontent.com |
| cloudfront.cdn.snapcraftcontent.com |
The specific *.cdn.snapcraft.io domains are the following:
| Hostname |
| fastly.cdn.snapcraft.io |
| cloudfront.cdn.snapcraft.io |
| canonical-lgw01.cdn.snapcraft.io |
| canonical-lcy01.cdn.snapcraft.io |
| canonical-bos01.cdn.snapcraft.io |
| fastly-global.cdn.snapcraft.io |
The specific *.snapcraft.io domains are the following:
| Hostname |
| api.snapcraft.io |
| dashboard.snapcraft.io |
Please note that if you resolve the above hostnames to IPs and then whitelist these IPs in your firewall, your deployment will break as we use Cloudflare in front of our infrastructure to mitigate attacks.
You may also need to whitelist your DNS (port 53/UDP) servers (which are retrieved from the DHCP server by default).