Outbound network access requirements for self-hosted Instana deployments

Before you deploy Instana backend in a self-hosted (on-premises) environment, set the firewall and proxy properly to allow the following outbound network access:

Note: Instana Backend components are provided by using remote software repositories and a remote registry that contains Docker images. For billing purposes, the submission of usage information to the central Instana Accounting System is required. What follows is a list of all remote systems that need to be reachable during installation and operation. The Instana console uses your sales and agent keys as login credentials.

Linux® software repository for Instana backend

The following repository provides package files for the Docker-based installer, which are available as deb format for Ubuntu and rpm format for Red Hat Enterprise Linux (RHEL). In addition, the repository provides the package file for the kubectl plug-in.

Repository: https://artifact-public.instana.io/

  • Port: 443
  • Protocol: HTTPS
  • Authentication: yes

Container registry for Instana

The following repository needs to be accessed to download the actual Instana backend images that are used by Docker-based backend installer and the kubectl plug-in:

Repository: https://artifact-public.instana.io

  • Port: 443
  • Protocol: HTTPS
  • Authentication: yes

Accounting access for Instana backend

Instana's pricing model is a usage-based system that relies on usage information that is sent to Instana's accounting backend. The usage information is sent to the following system:

Accounting Backend: https://instana.io/portal/statistics/usage

  • Port: 443
  • Protocol: HTTPS
  • Authentication: no

Note: Individual login information for the registry is provided.

Instana agent and sensor repositories

  • The following repository needs to be accessed to download static host agents and dynamic host agents:

    Repository: https://containers.instana.io

    • Port: 443
    • Protocol: HTTPS
    • Authentication: no

  • The following repository needs to be accessed to download agent images from the IBM Cloud Container Registry (ICR):

    Repository: https://icr.io/instana

    • Port: 443
    • Protocol: HTTPS
    • Authentication: no

  • The following repository needs to be accessed if you want to use the packages installation method to install the host agent:

    Repository: https://packages.instana.io/

    • Port: 443
    • Protocol: HTTPS
    • Authentication: no

  • The following repository needs to be accessed if you want to use the one-liner Installation procedure to install the host agent:

    Repository: https://setup.instana.io/

    • Port: 443
    • Protocol: HTTPS
    • Authentication: no

  • New sensors, updates to existing sensors, and agent updates are pulled daily from the following repository if dynamic agents are installed:

    Repository: http://artifact-public.instana.io/

    • Port: 443
    • Protocol: HTTPS
    • Authentication: yes

  • The following URL repository needs to be accessed to store Synthetic PoP Helm packages, autotrace-webhook, and agent Helm packages:

    Repository: https://agents.instana.io/helm

    • Port: 443
    • Protocol: HTTPS
    • Authentication: yes