Network access for IBM Cloud monitoring

Partizan · March 12

Hi,

We are trying to connect IBM Cloud (Frankfurt location) into Xormon NG monitoring. And we have questions:

what IP addresses we should open in network firewall to allow Xormon get access to IBM Cloud?
is there any way to configure Xormon accessing IBM Cloud IPs via HTTP proxy?

Regards,

Michael

Pavel · March 12

everything should be here: https://xormon.com/install-cloud.php#IBMCloud

I do not know your IBM cloud IP.

Partizan · March 12

I saw this document. Unfortunately there are zero information about what IPs used or how to configure firewall or HTTP proxy.

And there are no option to specify IP address in IBM Cloud configuration.

Patrik · March 13

Hi Michael,

Thank you for your question.

Xormon NG connects to IBM Cloud services using DNS hostnames rather than fixed IP addresses. IBM Cloud uses load balancing and dynamic infrastructure, so the resolved IP addresses may change over time. Because of this, we cannot provide a fixed list of IP addresses to allow in the firewall.

Firewall configuration

To allow Xormon NG to communicate with IBM Cloud, please allow outbound HTTPS connections (TCP port 443) from the Xormon server to the IBM Cloud API endpoints listed below.

Authentication endpoint

https://iam.cloud.ibm.com

VPC infrastructure API endpoints (regional)

https://eu-de.iaas.cloud.ibm.com (Frankfurt)
https://eu-gb.iaas.cloud.ibm.com (London)
https://eu-es.iaas.cloud.ibm.com (Madrid)
https://us-east.iaas.cloud.ibm.com (Washington DC)
https://us-south.iaas.cloud.ibm.com (Dallas)
https://ca-tor.iaas.cloud.ibm.com (Toronto)
https://br-sao.iaas.cloud.ibm.com (São Paulo)
https://au-syd.iaas.cloud.ibm.com (Sydney)
https://jp-osa.iaas.cloud.ibm.com (Osaka)
https://jp-tok.iaas.cloud.ibm.com (Tokyo)

Since you mentioned the Frankfurt region, the main endpoint used will typically be:

https://eu-de.iaas.cloud.ibm.com

Power Virtual Server (PowerVS) monitoring endpoints

https://eu-de.power-iaas.cloud.ibm.com (Frankfurt)
https://lon.power-iaas.cloud.ibm.com (London)
https://mad.power-iaas.cloud.ibm.com (Madrid)
https://syd.power-iaas.cloud.ibm.com (Sydney)
https://sao.power-iaas.cloud.ibm.com (São Paulo)
https://mon.power-iaas.cloud.ibm.com (Montreal)
https://tor.power-iaas.cloud.ibm.com (Toronto)
https://che.power-iaas.cloud.ibm.com (Chennai)
https://tok.power-iaas.cloud.ibm.com (Tokyo)
https://osa.power-iaas.cloud.ibm.com (Osaka)
https://us-east.power-iaas.cloud.ibm.com (Washington DC)
https://us-south.power-iaas.cloud.ibm.com (Dallas)

We always collect wrokspace information from the Frankfurt region, that way we get information on worskpaces from all the regions so you dont have to select any of the power workspaces in the initial configuration form, but you will have to allow: