Network Rules — Inbound & Outbound
The following table presents the recommended and default settings.
Info
A public IP is not required.
| Resource | Inbound | Outbound | Comment |
|---|---|---|---|
| Thinfinity Gateway 1 | 9443 + 443 (bindings) | 0.0.0.0 | Must be joined to the domain; receives traffic from the load balancer. |
| Thinfinity Gateway 2 | 9443 + 443 (bindings) | 0.0.0.0 | Must be joined to the domain; receives traffic from the load balancer. |
| Thinfinity Gateway N | 9443 + 443 (bindings) | 0.0.0.0 | Must be joined to the domain; receives traffic from the load balancer. |
| Thinfinity Broker 1 | 7443 (License Service), 389/636 (LDAP/LDAPS) | 0.0.0.0 | Authenticates against Active Directory; communicates with OCI MySQL DB. |
| Thinfinity Broker 2 | 7443 (License Service), 389/636 (LDAP/LDAPS) | 0.0.0.0 | Authenticates against Active Directory; communicates with OCI MySQL DB. |
| OCI MySQL Database | 3306 | – | Database service integrated into the domain; used for sessions and configs. |
| Monitoring Service | 4317–4318 | – | Collects metrics from gateways and brokers for observability. |
| Monitoring Storage | – | – | Dedicated disk for storage of monitoring and telemetry data. |