Network requirements
This page lists the network access needed to install, operate and monitor FactryOS. For server sizing, see System requirementsSystem requirements.
Internet access from the MES server
We recommend full outbound internet access. If that is not possible, allow outbound HTTPS (TCP 443) to the following domains, including subdomains:
Domain | Purpose |
|---|---|
archive.ubuntu.com, security.ubuntu.com | OS updates |
apt.postgresql.org, postgresql.org | PostgreSQL |
dl.cloudsmith.io | Caddy web server |
dl.influxdata.com, repos.influxdata.com | InfluxDB and monitoring agent |
github.com, objects.githubusercontent.com, raw.githubusercontent.com | Installation tooling |
Monitoring
Factry monitors every installation to follow up on its health in real time. This requires outbound traffic from the MES server:
Destination | IP | Port |
|---|---|---|
monitoring.factry.cloud | 128.199.32.136 | TCP 8086 |
Access for end users
Users open FactryOS in a web browser and need network access to the MES server.
HTTPS (recommended)
- Inbound TCP 443 from all user networks to the MES server
- A DNS name for the MES server that resolves for all users
- An SSL certificate for that DNS name, delivered to Factry (a wildcard certificate is preferred)
HTTP (fallback)
If HTTPS is not possible, FactryOS can run over HTTP on TCP 80. Traffic, including login credentials, is then unencrypted. Only use this on a trusted, isolated network.