Outbound network access destinations for CCMv2

When using Cluster Connectivity Manager in an environment with limited internet access or proxy, make sure to add the following outbound network access destinations to the allow list.

Outbound network access destinations for CCMv2

Description/Usage

Cloudera Service

Destination

Protocol & Authentication

IP Protocol / Port

Comments

Cloudera CCMv2

Persistent Cloudera Control Plane connection

All services

US-based Cloudera Control Plane:

*.v2.us-west-1.ccm.cdp.cloudera.com

35.80.24.128/27

EU-based Cloudera Control Plane:

*.v2.ccm.eu-1.cdp.cloudera.com

3.65.246.128/27

AP-based Cloudera Control Plane:

*.v2.ccm.ap-1.cdp.cloudera.com

3.26.127.64/27

HTTPS with mutual authentication

TCP/443

Multiple long-lived/persistent connections

Cloudera CCMv1

Persistent Cloudera Control Plane connection

All services

*.ccm.cdp.cloudera.com

44.234.52.96/27

SSH public/private key authentication

TCP/6000-6049

One connection per cluster configured; persistent.