Network & Port Requirements
To ensure normal data collection and transmission, verify network connectivity and firewall/security group policies before deploying Agents and SDKs.
Network Requirements for Application Agents
UniAgent Network Requirements
This section describes the typical access paths and port settings that you need to allow in the firewall/security group before deploying the UniAgent application Agent.
A typical UniAgent deployment architecture is as follows:
Based on this architecture, example network policies are as follows (the IP addresses in the diagram are only used to illustrate traffic direction; in actual deployments, the addresses can be in the same subnet or across subnets):
- The following table provides example network policies based on the IP addresses and ports in the diagram. Adjust them according to your actual addressing plan and port configuration before applying them.
- Guanyun Platform uses port 80 by default for external access. You can change the external access port through Ingress. For more information about how to configure the external access port through Ingress, see the Guanyun Platform deployment Manual.
| Source Address | Destination Address | Ports to Allow | Description |
|---|---|---|---|
| 192.168.5.2 (Collector) | 192.168.5.1 (Guanyun) | 80 | Installing Collector and uploading data to Guanyun Platform. |
| 192.168.5.3 (Business App) | 192.168.5.1 (Guanyun) | 80 | Installing the Agent online (if you do not allow this policy, you can copy the installation package to the server and install offline). |
| 192.168.5.3 (Business App) | 192.168.5.2 (Collector) | 7665, 7666 | Pushing data from backend application Agents to Collector: APM Collector uses port 7665, and Infra Collector uses port 7666. |
| User | 192.168.5.1 (Guanyun) | 80 | Accessing Guanyun Platform. |
Kubernetes UniAgent Network Requirements
This section describes the typical access paths and port settings that you need to allow in the firewall/security group before deploying the K8s UniAgent application Agent.
A typical K8s UniAgent deployment architecture is as follows:
Based on this architecture, example network policies are as follows (the IP addresses in the diagram are only used to illustrate traffic direction; in actual deployments, the addresses can be in the same subnet or across subnets):
- The following table provides example network policies based on the IP addresses and ports in the diagram. Adjust them according to your actual addressing plan and port configuration before applying them.
- Guanyun Platform uses port 80 by default for external access. You can change the external access port through Ingress. For more information about how to configure the external access port through Ingress, see the Guanyun Platform deployment Manual.
| Source Address | Destination Address | Ports to Allow | Description |
|---|---|---|---|
| 192.168.5.2 (K8s Cluster) | 192.168.5.1 (Guanyun) | 80 | Installing the Agent online and uploading data to Guanyun Platform. |
| User | 192.168.5.1 (Guanyun) | 80 | Accessing Guanyun Platform. |
Network Requirements for Real User Monitoring SDKs
Mobile SDK Network Requirements
This section describes the typical access paths and port settings that you need to allow in the firewall/security group before deploying the Mobile SDK.
A typical Mobile SDK deployment architecture is as follows:
Based on this architecture, example network policies are as follows (the IP addresses in the diagram are only used to illustrate traffic direction; in actual deployments, the addresses can be in the same subnet or across subnets):
- The following table provides example network policies based on the IP addresses and ports in the diagram. Adjust them according to your actual addressing plan and port configuration before applying them.
- Guanyun Platform uses port 80 by default for external access. You can change the external access port through Ingress. For more information about how to configure the external access port through Ingress, see the Guanyun Platform deployment Manual.
| Source Address | Destination Address | Ports to Allow | Description |
|---|---|---|---|
| Mobile | 192.168.1.1 (Guanyun) | 30101 | Uploading data to Guanyun Platform. |
| User | 192.168.1.1 (Guanyun) | 80 | Accessing Guanyun Platform. |
Web and Mini Program JavaScript Agent Network Requirements
This section describes the typical access paths and port settings that you need to allow in the firewall/security group before deploying the Web or Mini Program JS Agent.
A typical Web or Mini Program JS Agent deployment architecture is as follows:
Based on this architecture, example network policies are as follows (the IP addresses in the diagram are only used to illustrate traffic direction; in actual deployments, the addresses can be in the same subnet or across subnets):
- The following table provides example network policies based on the IP addresses and ports in the diagram. Adjust them according to your actual addressing plan and port configuration before applying them.
- Guanyun Platform uses port 80 by default for external access. You can change the external access port through Ingress. For more information about how to configure the external access port through Ingress, see the Guanyun Platform deployment Manual.
| Source Address | Destination Address | Ports to Allow | Description |
|---|---|---|---|
| Web application/Mini Program | 192.168.1.1 (Guanyun) | 30103 | Downloading the Agent from Guanyun Platform and uploading data to Guanyun Platform. |
| User | 192.168.1.1 (Guanyun) | 80 | Accessing Guanyun Platform. |