SSL Whitelisting
If a firewall or proxy on your network performs SSL inspection, exempt the endpoints below so the Gallium Edge hypervisor can reach the Console. This list is used by Installing Gallium Edge.
Domains
Allow outbound HTTPS (port 443) to these domains and exempt them from SSL inspection.
| Domain | Purpose |
|---|---|
api.gallium.cloud | Primary API service endpoint |
relay.gallium.cloud | Remote VM console relay service |
us-k1.gallium-relay.com | United States K1 regional relay |
us-k2.gallium-relay.com | United States K2 regional relay |
eu-1.gallium-relay.com | Europe region 1 relay |
au-1.gallium-relay.com | Australia region 1 relay |
gallium.b-cdn.net | Content delivery network for assets |
IP Addresses
Allow outbound connections to these addresses. They provide connectivity to the out-of-band support tooling that the Gallium support team uses to recover a hypervisor.
137.184.44.15141.95.127.134
TLS Version and Cipher Suites
The hypervisor connects with TLS 1.3 and one of these cipher suites:
TLS_AES_128_GCM_SHA256TLS_AES_256_GCM_SHA384TLS_CHACHA20_POLY1305_SHA256
An inspecting device that substitutes its own certificate or renegotiates the cipher suite will fail this handshake.