Limited HTTPS jira port list - is there any workaround?

Question

Hello, I am integrating Jira cloud instance with my custom application that is behind a firewall. My issue is that I cannot use custom ports for HTTPS REST traffic outgoing from jira. First, I opened network traffic for ips from https://support.atlassian.com/organization-administration/docs/ip-addresses-and-domains-for-atlassian-cloud-products/#Outgoing-Connections Then I created an example automation rule with a single action (send web request) to test the connection. Test failed to reach the firewall and after looking at the response it seems this was due to being stopped at Squid proxy located inside Jira cloud network. Error response HTTP body: ERROR: The requested URL could not be retrieved

kkundera · Answer

Hello,

Yes, I am running two instances but on cloud, and the problem is communication outgoing from cloud.

I had this simple automation rule set up:

and this is the result:

Official info from here [AUTO-151] is:

The request is denied from Atlassian as the squid proxy only allows the following safe ports to be used in the destination URLs:

80 8080 443 8443 8444 7990 8090 8085 8060

These ports are an issue to me :/  I wonder if there is any workaround

Nic Brough -Adaptavist- · Answer

Ah, ok, not trying to run Jira on two different ports, but trying to run two systems on different ports.

I assume you are running Server or Data-center installations of Jira for the two systems, not Atlassian Cloud (because you won't be able to change ports on Cloud)

To change the ports on a server or DC install, look at the Tomcat's server.xml, and edit the port that each one is serving on (just needs a restart after changing the number, no need for indexing or anything else)

However, there should probably not be any need to do that - you could look at the urls instead of the ports.

kkundera · Answer

Hello, thank you!

Maybe my explanation was not clear.

I would like to run two instances of jira - sandbox and production. I would like to send data from jira sandbox to my custom application that is behind a firewall, lets say https://myapplication.com/rest/, using REST with port 8500, and from jira production to https://myapplication.com/rest/ using REST with port 8600.

Both jira sandbox and jira prod are on cloud and because of this they share the possible ip pool.

There are two different destination ports used here, so that firewall on my custom application can direct the sandbox jira data to my custom sandbox application, and prod jira data to my custom prod application.