Skip to main content

SSL Whitelisting for Gallium

Overview​

The Gallium platform employs TLS encryption for all communications between the Hypervisor and Console components. Organizations deploying the Hypervisor behind firewalls with SSL inspection capabilities should whitelist specific endpoints and addresses to maintain proper functionality.

Required URLs for Whitelisting​

The following domains must be accessible:

DomainPurpose
api.gallium.cloudPrimary API service endpoint
relay.gallium.cloudRemote VM terminal relay service
us-k1.gallium-relay.comUnited States K1 relay
us-k2.gallium-relay.comUnited States K2 relay
eu-1.gallium-relay.comEurope region 1 relay
au-1.gallium-relay.comAustralia region 1 relay
gallium.b-cdn.netContent delivery network for assets

IP Addresses to Whitelist​

  • 137.184.44.15
  • 141.95.127.134

Encryption Standards​

The Gallium Hypervisor implements:

  • TLS 1.3 protocol
  • Supported cipher suites:
    • TLS_AES_128_GCM_SHA256
    • TLS_AES_256_GCM_SHA384
    • TLS_CHACHA20_POLY1305_SHA256