Network

Network Considerations

This section describes networking requirements and recommendations for JFrog Platform Deployments

  • Networking Routable IP Space and Cluster AZ Deployment for each Component
  • The Load Balancer will be a layer 7 public facing load balancer and must have routable external IP address space for incoming and outgoing traffic
  • When the JFrog Platform is deployed in three Availability Zones (HA), you need three /24 network IP address space to house JFrog Platform services such as Artifactory, Xray, Distribution, etc.

Please note that the JFrog Platform currently supports only IP address-based communication internally between the services in a single JFrog Platform deployment. This means that it does not support DNS names internally between the services.

Firewall

The routes between the Load Balancer and JFrog Platform Artifactory should not be blocked.

The network ports that need to be opened are listed in JFrog docs

  1. Artifactory
  2. Xray
  3. Distribution

Internal Ports

The JFrog Platform requires the following internal network ports to be opened up for Platform Services to communicate between them.

  • All services need port 8082 accessible
  • Artifactory requires also port 8081

The external access to the platform would be on port 443 through a load balancer, exposed to external traffic.