BlueCat Horizon uses the following domains, which are publicly accessible:
User endpoints:
| Domain | Description |
|---|---|
| <customer_label>.bluecathorizon.com | Platform user interface |
| <customer_label>.ddi.bluecathorizon.com | DDI orchestrator user interface |
| auth.<domain>.bluecathorizon.com | Authentication flow entry point |
| auth.bluecathorizon.com | Authentication flow redirection |
* <customer_label> is the name of your tenant.
Connection endpoints:
The following endpoints must be open for connections, with the exception of
<rdcDomain>.bluecathorizon.com, which is
instead used by the UI or can be used to make API calls.
| Domain | Description |
|---|---|
| gdc.bluecathorizon.com | External API/Machine non-auth |
| api-mtls.bluecathorizon.com | Machine Cert Renewal |
| <rdcDomain>.bluecathorizon.com* | External API |
| api-mtls.<rdcDomain>.bluecathorizon.com* | Machine API/tunnel domain |
* Refer to the instructions in Identifying tenant information to identify your <rdcDomain>.
Port requirements
On your local machine, make sure the following port is open. This enables your machine to communicate with the cloud:
| Source | Destination | Source port | Destination port | Protocol | Description |
|---|---|---|---|---|---|
| <DDI agent> | <Connection endpoint> | Ephemeral | 443 | TCP |
|