Allowlisted URLs and Air-Gapped Environment Considerations
Allowlist JFrog service URLs (releases.jfrog.io, charts.jfrog.io, jes.jfrog.io) in proxy/firewall settings.
For seamless operations and connectivity with JFrog servers, allowlist the following URLs in your proxy settings or firewall outbound rules. Verify that your firewall and proxy settings allow traffic to these URLs for uninterrupted services.
- Internet Gateway: If your organization routes outgoing requests through a forward proxy, configure the proxy settings for your JFrog Platform. For more information, see Manage Proxy Servers.
- Air-Gapped Environments: If your organization does not allow internet access, configure your platform in an air-gapped environment and manually load the resources. For more information, see Configure JFrog Platform in an Air-gapped Environment.
Allowlisted URLs
Allow outbound access to the following URLs for uninterrupted access to JFrog services and resources.
JFrog AI/ML, AI Catalog, and MCP Registry
Allow these domains to use JFrog AI/ML, AI Catalog, ML Bridge, and MCP Registry.
| URL / Domain | Port | Protocol | Reason | Required for |
|---|---|---|---|---|
grpc.qwak.ai | 443 | gRPC over TLS | Backend ML runtime and gRPC communication for ML features and model management. | AI Catalog, ML Bridge, JFrog ML, MCP Registry |
apa.ml.jfrog.io | 443 | HTTPS | ML frontend microservices, UI static asset manifests, and ML management APIs. | AI Catalog, JFrog ML UI |
bridge.ml.jfrog.io | 443, 10443 | HTTPS, gRPC | ML Bridge reverse tunnel gateway and two-way communication. | ML Bridge (self-managed) |
wingmancentralendpoint.jfrog.io | 443 | HTTPS, gRPC | Central endpoint for the AI coding assistant (Wingman) and MCP Registry. | MCP Registry, coding assistant |
JFrog Security, Curation, and Catalog
Allow these URLs for Xray, JFrog Advanced Security, JFrog Catalog, and Curation database sync.
| URL / Domain | Port | Protocol | Reason | Required for |
|---|---|---|---|---|
https://jfscatalogcentral.jfrog.io | 443 | HTTPS | Central database sync for package metadata, open-source package data, and Curation policies. | JFrog Catalog, Curation |
https://jfsxraycentral.jfrog.io | 443 | HTTPS | Central database update service for the Xray indexer, analysis, and SBOM components. | Xray, JFrog Advanced Security |
https://jxray.jfrog.io | 443 | HTTPS | Xray vulnerability database sync and analytics telemetry. | Xray |
https://jfscatalogpartners.jfrog.io | 443 | HTTPS | Partner catalog data feeds and security skill scanning. | JFrog Catalog, Curation |
https://data-enrichment.jfrog.io | 443 | HTTPS | Vulnerability, CVE, and package metadata enrichment feed. | Xray, Curation |
Platform Integrations and Extensions Store
Allow these URLs for ecosystem integrations and the JFrog Extensions Store.
| URL / Domain | Port | Protocol | Reason | Required for |
|---|---|---|---|---|
https://central-integration.jfrog.io | 443 | HTTPS | Platform central integrations, ecosystem connectors, and third-party sync. | Ecosystem integrations (Jira, GitHub, Slack) |
https://storedashboard.jfrog.io | 443 | HTTPS | Extensions store, integrations dashboard, and plugin catalog. | JFrog Extensions Store |
Communicate with JFrog Backoffice
Allow these URLs so JFConnect can fetch entitlements and report usage.
| URL / Domain | Port | Protocol | Reason | Required for |
|---|---|---|---|---|
https://jes.jfrog.io | 443 | HTTPS | The URL of the JFrog Entitlements Server that contains the details of the entitlements associated with your subscription. JFConnect registers the license in the JFrog Entitlements Server and fetches the entitlements. | JFConnect (all self-managed products) |
https://jcs.jfrog.io | 443 | HTTPS | The URL of the JFrog Consumption Server that receives usage files created by the Observability microservice to measure the resources consumed by various JFrog services in the JPD. | Observability, JFConnect |
Download JFrog Installation Binaries
Allow these URLs to download installers, Docker images, and Helm charts.
| URL / Domain | Port | Protocol | Reason | Required for |
|---|---|---|---|---|
https://releases.jfrog.io | 443 | HTTPS | This URL acts as the primary source for JFrog's installation binaries. For JFrog AI/ML, your JPD must connect to this URL directly, not through a proxy. | Product installation and upgrades, Xray database synchronization, JFrog AI/ML |
https://releases-cdn.jfrog.io | 443 | HTTPS | This URL acts as the content delivery network (CDN) endpoint for releases.jfrog.io. | Product installation and upgrades, Xray database synchronization |
https://releases-docker.jfrog.io | 443 | HTTPS | This URL acts as the primary source for JFrog's Docker images and repositories. | Docker and Docker Compose installations |
https://charts.jfrog.io | 443 | HTTPS | This URL acts as the JFrog Helm Charts repository. | Kubernetes and Helm installations |
Diagnostics and Support
Allow this URL to upload support bundles.
| URL / Domain | Port | Protocol | Reason | Required for |
|---|---|---|---|---|
https://supportlogs.jfrog.com | 443 | HTTPS | Support bundle upload gateway for automated support triage. | Support bundles |
Related Topics
Updated 7 days ago
Did this page help you?