Overview
To ensure optimal performance of the Druva inSync Client, it is important to configure firewall and proxy settings appropriately. Network firewalls and SSL-terminating proxies can interfere with backup and restore operations by blocking traffic or modifying data packets. To avoid such disruptions, organizations should allow traffic to Druva and AWS S3 storage URLs and set exclusions for critical application paths and configuration files.
Note:
If you have already excluded the IP ranges provided by Druva, add all the respective URLs for your region, and do not remove the IP address from your firewall rules.
Allow URLs in the firewall rules
Depending on your deployment regions, US region or APAC region, you must allow the below URL’s in the network firewall rules.
AWS S3 storage region URLs
HA Proxy URLs
inSync Client Bandwidth URL
Download Aggregator URLs
Note
Druva uses port 443 to ensure secure connections and communication during backup and restore operations.
Know your deployment region
To determine your deployment region, perform the following steps:
Log in to the Druva Cloud Platform console.
After logging in, check your URL:
If the URL starts with console.druva.com, your account is deployed in the US deployment region.
If the URL starts with ap1-console.druva.com, your account is deployed in the Asia Pacific (APAC) deployment region.
Allow Storage URLs for US deployment region
Druva Storage Regions for US Deployment Region
Druva Storage Regions for US Deployment Region
Allow the following AWS S3 storage Alias URLs to access storage during backups and restores.
The AWS S3 URLs are region specific as mentioned in below table
Storage Region | S3 Alias |
Northern Virginia (us-east-1) | |
Northern California (us-west-1) | |
Oregon (us-west-2) | |
Ireland (eu-west-1) | |
London (eu-west-2) | |
Paris (eu-west-3) | |
Stockholm (eu-north-1) | |
Frankfurt (eu-central-1) | |
São Paulo (sa-east-1) | |
Montreal (ca-central-1) | |
Hong Kong (ap-east-1) | |
Tokyo (ap-northeast-1) | |
Seoul (ap-northeast-2) | |
Mumbai (ap-south-1) | |
Singapore (ap-southeast-1) | |
Sydney (ap-southeast-2) | |
UAE (me-central-1) | |
Cape Town (af-south-1) |
HA Proxy URLs for US Deployment Region
HA Proxy URLs for US Deployment Region
Below are the HA proxies URLs as per the storage region that needs to be allowed for smooth inSync Client operation.
Storage Region | URL |
Northern Virginia (us-east-1) | |
Northern California (us-west-1) | |
Oregon (us-west-2) | |
Ireland (eu-west-1) | |
London (eu-west-2) | |
Paris (eu-west-3) | |
Stockholm (eu-north-1) | |
Frankfurt (eu-central-1) | |
Hong Kong (ap-east-1) | |
Tokyo (ap-northeast-1) | |
Mumbai (ap-south-1) | |
Singapore (ap-southeast-1) | |
Sydney (ap-southeast-2) | |
São Paulo (sa-east-1) | |
Montreal (ca-central-1) | |
UAE (me-central-1) | |
Cape Town (af-south-1) | |
Seoul (ap-northeast-2) |
inSync Client Bandwidth URL
The URL mentioned below is used to estimate available bandwidth.
Download Aggregator URL
Download Aggregator URL
Below regional Download Aggregator URL is used for downloading data from the Admin/User portal.
These urls must be allowed to ensure the download functionality works correctly.
Region | Download Aggregator URL |
Northern Virginia (us-east-1) | |
Northern California (us-west-1) | |
Oregon (us-west-2) | |
Ireland (eu-west-1) | |
London (eu-west-2) | |
Paris (eu-west-3) | |
Stockholm (eu-north-1) | |
Frankfurt (eu-central-1) | |
Hong Kong (ap-east-1) | |
Tokyo (ap-northeast-1) | |
Mumbai (ap-south-1) | |
Singapore (ap-southeast-1) | |
Sydney (ap-southeast-2) | |
São Paulo (sa-east-1) | |
Montreal (ca-central-1) | |
UAE (me-central-1) | |
Cape Town (af-south-1) | |
Seoul (ap-northeast-2) |
Allow Storage URLs for APAC deployment region
Allow the following Druva URLs in your network firewall rules:
Druva Storage Regions for APAC Deployment Region
Druva Storage Regions for APAC Deployment Region
Allow the following AWS S3 storage Alias URLs to access storage during backups and restores. The AWS S3 URLs are region specific as mentioned in below table
Storage Region | AWS S3 Alias |
Northern Virginia (us-east-1) | |
Hong Kong (ap-east-1) | |
Tokyo (ap-northeast-1) | |
Mumbai (ap-south-1) | |
Singapore (ap-southeast-1) | |
Sydney (ap-southeast-2) | |
UAE (me-central-1) |
HA Proxy URLs for APAC Deployment Region
HA Proxy URLs for APAC Deployment Region
Below are the HA proxies URLs as per the storage region that needs to be allowed for smooth inSync Client operation.
Storage Region | URL |
Northern Virginia (us-east-1) | |
Hong Kong (ap-east-1) | |
Tokyo (ap-northeast-1) | |
Mumbai (ap-south-1) | |
Singapore (ap-southeast-1) | |
Sydney (ap-southeast-2) | |
UAE (me-central-1) |
Client Bandwidth URL
The URL mentioned below is used to estimate available bandwidth.
Download Aggregator URL for APAC Deployment region
Download Aggregator URL for APAC Deployment region
Below regional Download Aggregator URL is used for downloading data from the Admin/User portal. These urls must be allowed to ensure the download functionality works correctly.
StorageRegion | URL |
Northern Virginia (us-east-1) | |
Hong Kong (ap-east-1) | |
Tokyo (ap-northeast-1) | |
Mumbai (ap-south-1) | |
Singapore (ap-southeast-1) | |
Sydney (ap-southeast-2) | |
UAE (me-central-1) |
To get the complete updated Firewall Rules for your instance please contact Druva Support