Connections & firewall rules
The data station and Analysis Hub require connections to the Linksight services and to data stations from other organizations. This page provides an overview of all connections which the Linksight components need to establish.
Linksight services
Data station and Analysis Hub
Data station
| Direction | IP protocol | Port | IP range/hostname | Note |
|---|
| INGRESS | TCP | 8443 + 9090 (mTLS HTTP + gRPC) | * (1) | Peer-to-peer connections between data stations |
| EGRESS | TCP | 8443 + 9090 (mTLS HTTP + gRPC) | * (1) | Peer-to-peer connections between data stations |
(1) For increased security, it is recommended to only allow connections from trusted peer organizations/data stations. Consult the network status page in the Governance/Analysis Hub or the data station logs to get the IP addresses of other peers.
Analysis Hub
| Direction | IP protocol | Port | IP range/hostname | Note |
|---|
| INGRESS | TCP | 8000 (HTTP/HTTPS) | <internal IP range> | Analysis Hub frontend |
| INGRESS | TCP | 8080 (gRPC/gRPCS) | <internal IP range> | Analysis Hub API, required for data scientists using the Linksight Python Interface. |