7cb260a70d
This adds the initial lists of transient connections (protocols, ports, etc). Also adds listening services and hosts used.
32 lines
1.1 KiB
Markdown
32 lines
1.1 KiB
Markdown
# Edge Control
|
|
This document describes the expected connections and listening services.
|
|
|
|
## Transient Connections
|
|
| Service | Direction | Ports | Encrypted? | Ciphers |
|
|
| --------|-----------|-------|------------|--------------|
|
|
| Azure Container Registry | Egress | 443 | Yes | MSFT Managed |
|
|
| DOD CRL Service | Egress | 443 | Yes | DOD Managed |
|
|
| Azure Storage | Egress | 443 | Yes | MSFT Managed|
|
|
| Redis | Egress | 6380 | Yes | MSFT Managed|
|
|
| Postgres | Egress | 5432 | Yes | MSFT Managed|
|
|
|
|
# Listening Ports / Services
|
|
| Service/App | Port | Encrypted? | Accessible |
|
|
|-------------|------|------------|--------|
|
|
| ATAT App | 80, 443 | Both | Load Balancer Only
|
|
| ATAT Auth | 80, 443 | Both | Load Balancer Only
|
|
|
|
# Host List
|
|
## Dev
|
|
| Service| Host |
|
|
|--------|------|
|
|
| Redis | cloudzero-dev-redis.redis.cache.windows.net |
|
|
| Postgres| cloudzero-dev-sql.postgres.database.azure.com |
|
|
| Docker Container Registry | cloudzerodevregistry.azurecr.io |
|
|
|
|
## Production
|
|
| Service | Host |
|
|
|---------|------|
|
|
| Redis | |
|
|
| Postgres| |
|
|
| Docker Container Registry | | |