nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

What outgoing network connections should be allowed from a JIRA server?

François Mancho1

Hi,

My customer's IT department has a rather strict network security policy. They won't let a JIRA app server connect to uncontrolled servers on the public Internet.

To download, install or upgrade JIRA plugins, I need the server to open connections to Atlassian servers using HTTP and / or HTTPS. Is there any other feature that needs this?

I guess the question is: where can I find a (hopefull exhaustive) list of outgoing connections (server names, IP addresses, port numbers) that should be allowed to go through the corporate firewall?

Thanks,

Accepted answers

Radu Dumitriu

"They won't let a JIRA app server connect to uncontrolled servers on the public Internet.". Paranoia sometimes pays back ...

"To download, install or upgrade JIRA plugins, I need the server to open connections to Atlassian servers using HTTP and / or HTTPS. Is there any other feature that needs this?"

No, you do not need it, you can do it manually each time.

AFAIK: outgoing connections are: HTTP / HTTPS to all domain atlassian.com. Depending on the plugins, you may need connections to the plugins sites as well.

All comments

Radu Dumitriu

"They won't let a JIRA app server connect to uncontrolled servers on the public Internet.". Paranoia sometimes pays back ...

"To download, install or upgrade JIRA plugins, I need the server to open connections to Atlassian servers using HTTP and / or HTTPS. Is there any other feature that needs this?"

No, you do not need it, you can do it manually each time.

AFAIK: outgoing connections are: HTTP / HTTPS to all domain atlassian.com. Depending on the plugins, you may need connections to the plugins sites as well.

François Mancho1

Radu, thanks for your answer.

"HTTP / HTTPS to all domain atlassian.com."

Yes, that would be my first guess as weel. However, a network capture tells me that JIRA is contacting "63-246-22-216.contegix.com". I understand that Contegix is Atlassian's hosting partner (http://confluence.atlassian.com/display/EHOSTING/Contegix+Hosting), so I guess I need to add that as well.

Anything else?

Radu Dumitriu

I never caught it going to contengix.com (but, of course, I believe you). But my advice would be that if you want to secure it as much as possible, cut all and install manually the needed plugins.

JamieA

Prevent the UPM from even attempting it with -Dupm.pac.disable=true.

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

jira

firewall

security

network