Network and firewall

The connector only makes outbound connections. You do not need to open any inbound ports from the internet.

Allow list

Allow outbound HTTPS (TCP 443) from the connector host to these addresses:

Address	Purpose
connect.acme-service.example	Secure connection to the Acme cloud
api.acme-service.example	Configuration and status
registry.acme-service.example	Connector image downloads and updates

Note

Use host names rather than IP addresses. IP addresses can change without notice.

Internal access

The connector host also needs to reach each data source on its port. See the default ports.

If you use Window Wiper Insight, allow your window wipers to reach the connector host on TCP 8883. This is traffic inside your network only.

Using a proxy

If your network requires a proxy, set ACME_PROXY_URL in your connector settings.

Docker Compose

environment:
  ACME_PROXY_URL: http://proxy.example.local:3128

Docker run

-e ACME_PROXY_URL=http://proxy.example.local:3128

Then restart the connector. See Update the connector.

Test connectivity

From the connector host:

curl -I https://connect.acme-service.example

Any HTTP response means the network path is open. A timeout means a firewall or proxy is blocking the connection.

TLS inspection

If your network inspects TLS traffic, exclude connect.acme-service.example from inspection. The connector pins its connection and will refuse to connect through an inspecting proxy.