Public Networking (Public Cloud)

Customers using public cloud infrastructure can create a Frame account using Frame-managed networking, Public Networking so users on the Internet can directly access the Frame workload VMs using the public IP addresses of the Frame workload VMs. For egress to the Internet, these workload VMs communicate directly to the Internet for publicly-accessible resources.

If users must access network resources on-premises or in a private network, a private network connection (e.g., VPN, direct connection, SD-WAN, VPC/VNET peering) with the appropriate routing must be implemented.

FRP8 Networking

FRP8 is a udp-based protocol for all communication between the end user and the Frame workload VMs.

Public IaaS - Public Networking (FRP8)

The following table lists the required protocols and ports for Frame accounts using Public Networking and FRP8.

Public Networking (Public Cloud)

Source to Destination	Source IP address	Destination FQDN(s)	Protocol/port
Workload VMs to Frame Platform	Public IP address	----[ US Backplane ]---- api.use.difr.com assets.use.difr.com img.use.difr.com logging.use.difr.com downloads.difr.com ----[ EU Backplane ]---- api.deu.difr.com hub.deu.difr.com logging.use.difr.com downloads.difr.com ----[ Required for Agent Updates via FAST ]---- download.visualstudio.microsoft.com ----[ Legacy Backplane ]---- gateway-external-api-prod.frame.nutanix.com img.console.nutanix.com img.frame.nutanix.com prod-kds-5683567dcbd60804cb34.s3.us-east-1.amazonaws.com assets.console.nutanix.com downloads.console.nutanix.com logging.console.nutanix.com	tcp/443 (HTTPS)
Workload VMs to Frame Platform	Public IP address	----[ US Backplane ]---- api.use.difr.com hub.use.difr.com ----[ EU Backplane ]---- api.deu.difr.com hub.deu.difr.com ----[ Legacy Backplane ]---- cch.console.nutanix.com messaging.console.nutanix.com	tcp/443 (HTTPS, WSS)
Workload VMs to Frame Platform	Public IP address	----[ US Backplane ]---- stun.use.difr.com ----[ EU Backplane ]---- stun.deu.difr.com ----[ Legacy Backplane ]---- stun.console.nutanix.com	udp/3478
End user to Frame Platform	Public IP address	----[ US Backplane ]---- use.difr.com api.use.difr.com img.use.difr.com login.use.difr.com (for Frame IdP, if used) logging.use.difr.com ----[ EU Backplane ]---- deu.difr.com api.deu.difr.com assets.deu.difr.com login.deu.difr.com (for Frame IdP, if used) downloads.difr.com ----[ Legacy Backplane ]---- console.nutanix.com img.frame.nutanix.com img.console.nutanix.com cpanel-backend.console.nutanix.com terminal-prod.frame.nutanix.com logging.console.nutanix.com login.console.nutanix.com (for Frame IdP, if used)	tcp/443 (HTTPS)
End user to Frame Platform	Public IP address	----[ US Backplane ]---- api.use.difr.com ----[ EU Backplane ]---- api.deu.difr.com ----[ Legacy Backplane ]---- messaging.console.nutanix.com	tcp/443 (HTTPS, WSS)
End user to Workload VM	Public IP address	*.difr.com *.nutanixframe.com or *.nutanix-frame.com resolving to a public IP address	udp/4503-4509, tcp/4503-4509 (optional)