.png%3Falt%3Dmedia%26token%3D01c36d88-f1dc-4330-ac87-1d8503ed4395){kind=icon}
.png%3Falt%3Dmedia%26token%3D01c36d88-f1dc-4330-ac87-1d8503ed4395){kind=icon}
Network
Data security is of utmost importance to JFrog. We invest heavily in securing our infrastructure in close partnership with world-class security experts.
At JFrog Connect, we take the privacy, security, and integrity of your data seriously. We adhere to industry standards and comply with relevant security and safety regulations to ensure the security of your data. We are also dedicated to enabling you to comply with your own internal security policies.
To provide the best user experience, we only engage top-tier vendors dedicated to privacy and security values and standards, including the largest cloud hosts and service providers in the market. Our vendors apply various controls to secure data including the use of secured data centers and compliance with the strictest certifications and accreditations.
Connect R&D team is working closely with Amazon web services (AWS) engineers experts department to provide the best-in-class cloud solution with the latest security compliance available.
Connect servers, databases, storage, and cloud environment are all based on AWS products with AES-256 encryption and live zone fallback. combined with an extra layer of security: a separate isolated Amazon Virtual Private Cloud (Amazon VPC ).
Connect edge Agent is based on client-server architecture, with no open ports or running servers on the edge device, as all communication is via outbound requests to ensure zero surfaces for attackers.
Port | Protocol | Description |
53 | UDP | The edge device uses port 53 to resolve Connect hostnames to communicate with Connect servers. |
443 | TCP | Connect edge device agent (client-side) and servers (server-side) mainly communicates with HTTPS TLS encryption, as the industry standard. |
To make use of Connect accessibility features, make sure that the following domains/IPs are whitelisted:
All Connect Domains | Static IP |
api.connect.jfrog.io | 3.127.6.122
35.159.42.141 |
connect.jfrog.io | 3.127.6.122
35.159.42.141 |
remote.connect.jfrog.io | 3.66.25.214 |
forwarding.connect.jfrog.io | 18.158.25.22 |
Remote accessibility features allow the user to directly connect to the edge's client (device).
All requests are outbound from the device to Connect servers.
In case there are strict network policies, make sure to allow outbound requests as described below.
Domain
remote.connect.jfrog.io
Static IP
3.66.25.214
Ports
443
Domain
forwarding.connect.jfrog.io
Static IP
18.158.25.22
Ports
Will try 22 at first, then 443, then 80.
Last modified 1mo ago