---
title: Network requirements
slug: factryos/reference/network-requirements
docTags: 
createdAt: 2026-10-22T13:16:31.717Z
---

This page lists the network access needed to install, operate and monitor FactryOS. For server sizing, see [System requirements](docId:4SjizdrfY2rbIDF22msj2).

## Internet access from the MES server

We recommend full outbound internet access. If that is not possible, allow outbound HTTPS (TCP 443) to the following domains, including subdomains:

| Domain                                                                | Purpose                       |
| --------------------------------------------------------------------- | ----------------------------- |
| archive.ubuntu.com, security.ubuntu.com                               | OS updates                    |
| apt.postgresql.org, postgresql.org                                    | PostgreSQL                    |
| dl.cloudsmith.io                                                      | Caddy web server              |
| dl.influxdata.com, repos.influxdata.com                               | InfluxDB and monitoring agent |
| github.com, objects.githubusercontent.com, raw\.githubusercontent.com | Installation tooling          |

## Monitoring

Factry monitors every installation to follow up on its health in real time. This requires outbound traffic from the MES server:

| Destination             | IP             | Port     |
| ----------------------- | -------------- | -------- |
| monitoring.factry.cloud | 128.199.32.136 | TCP 8086 |

## Access for end users

Users open FactryOS in a web browser and need network access to the MES server.

**HTTPS (recommended)**

- Inbound TCP 443 from all user networks to the MES server
- A DNS name for the MES server that resolves for all users
- An SSL certificate for that DNS name, delivered to Factry (a wildcard certificate is preferred)

**HTTP (fallback)**

If HTTPS is not possible, FactryOS can run over HTTP on TCP 80. Traffic, including login credentials, is then unencrypted. Only use this on a trusted, isolated network.