Public Networking (Public Cloud)
Customers using public cloud infrastructure can create a Frame account using Frame-managed networking, Public Networking so users on the Internet can directly access the Frame workload VMs using the public IP addresses of the Frame workload VMs. For egress to the Internet, these workload VMs communicate directly to the Internet for publicly-accessible resources.
If users must access network resources on-premises or in a private network, a private network connection (e.g., VPN, direct connection, SD-WAN, VPC/VNET peering) with the appropriate routing must be implemented.
FRP8 Networking
FRP8 is a udp-based protocol for all communication between the end user and the Frame workload VMs.
The following table describes the required protocols and ports for Frame accounts using Public Networking and FRP8 with the commercial Frame control plane.
| Source to Destination | Source IP address | Destination FQDN(s) | Protocol/port |
|---|---|---|---|
| Workload VMs to Frame Platform | Public IP address | gateway-external-api-prod.frame.nutanix.com img.console.nutanix.com img.frame.nutanix.com prod-kds-5683567dcbd60804cb34.s3.us-east-1.amazonaws.com assets.console.nutanix.com downloads.console.nutanix.com logging.console.nutanix.com download.visualstudio.microsoft.com | tcp/443 (HTTPS) |
| Workload VMs to Frame Platform | Public IP address | cch.console.nutanix.com messaging.console.nutanix.com | tcp/443 (HTTPS, WSS) |
| Workload VMs to Frame Platform | Public IP address | stun.console.nutanix.com | udp/3478 |
| End user to Frame Platform | Public IP address | console.nutanix.com img.frame.nutanix.com img.console.nutanix.com cpanel-backend.console.nutanix.com terminal-prod.frame.nutanix.com logging.console.nutanix.com login.console.nutanix.com (for Frame IdP, if used) | tcp/443 (HTTPS) |
| End user to Frame Platform | Public IP address | messaging.console.nutanix.com | tcp/443 (HTTPS, WSS) |
| End user to Workload VM | Public IP address | *.nutanixframe.com or *.nutanix-frame.com resolving to a public IP address | udp/4503-4509, tcp/4503-4509 (optional) |
FRP7 Networking
FRP7 will be end-of-life (EOL) effective June 30, 2024. Refer to the EOL Announcement of December 18, 2023 for further details.
FRP7 is a tcp-based protocol for all communication between the end user and the Frame workload VMs.
The following table describes the required protocols and ports for Frame accounts using Public Networking and FRP7 with the commercial Frame control plane.
| Source to Destination | Source IP address | Destination FQDN(s) | Protocol/port |
|---|---|---|---|
| Workload VMs to Frame Platform | Public IP address | gateway-external-api-prod.frame.nutanix.com img.console.nutanix.com img.frame.nutanix.com prod-kds-5683567dcbd60804cb34.s3.us-east-1.amazonaws.com assets.console.nutanix.com downloads.console.nutanix.com logging.console.nutanix.com download.visualstudio.microsoft.com | tcp/443 (HTTPS) |
| Workload VMs to Frame Platform | Public IP address | cch.console.nutanix.com | tcp/443 (HTTPS, WSS) |
| End user to Frame Platform | Public IP address | console.nutanix.com img.frame.nutanix.com img.console.nutanix.com cpanel-backend.console.nutanix.com terminal-prod.frame.nutanix.com logging.console.nutanix.com login.console.nutanix.com (for Frame IdP, if used) | tcp/443 (HTTPS) |
| End user to Workload VM | Public IP address | *.nutanixframe.com or *.nutanix-frame.com resolving to a public IP address | tcp/443 (HTTPS, WSS) |