...

Servers Located Behind a Firewall

In Image Modified, it is always the client that establishes a connection to the Platform. Once a connection has been established, it is used as a two-way communication channel; the Platform never needs to open an outgoing connection. Typically, the Platform has the server role in the system, while mzsh, Desktops, ECs and web browsers act as clients.

...

Listed below are the actions that should be taken to allow communication between hosts in the Image Modified system. It is assumed that the standard installation ports are used. If the default ports have been changed, replace the port numbers with the ones you are using.

• To allow mzsh, Desktops and EC/ECSAs to communicate with the Platform, incoming data to, and outgoing data from port 6790 in the Platform Container must be allowed.

• To allow the Platform Web Interface be accessed from outside the firewall and for STR synchronization, incoming data to, and outgoing data from the Platform's port 9000 must be allowed.

• To allow other types of synchronization between the Platform and pico instances, incoming data to, and outgoing data from port 6791 in the Platform Container must be allowed.
• To allow the EC Web Interface to be accessed from outside the firewall, incoming data to, and outgoing data from the EC's port 9090 must be allowed.

• To allow services on the Platform and the SC psc1 to be accessed from outside the firewall, incoming data to, and outgoing data from the following port ranges must be allowed:

  • 5451-5500
  • 5801-5850
• To allow remote access to Execution Containers, outgoing data must be allowed on port 22.