All traffic inbound and outbound from the Agent is HTTP WebSocket traffic.

Traffic from the Manager to your Agent(s) is by default using self signed certificates and using WSS (WebSocket Secure) eg. WebSocket via TLS.

The port used for your Agents is 8090 by default, but may be changed. If changed, your firewall rules must reflect this as well.

Firewall rules required for each agent:

• TCP inbound for agent port
• TCP outbound for agent port
• TCP inbound for cc-global.gameserver.cloud for port 666
• TCP outbound for cc-global.gameserver.cloud for port 666

FQDNs required to be whitelisted for Agent operations:

• cc-global.gameserver.cloud (Global default)
• cc-china.gameserver.cloud (Only accepting connections from China)
  Non-reachable during beta period.
• cc-nightly.gameserver.cloud (Early testing version, do NOT use for productions servers)
  Non-reachable during beta period.

IP resolving

IP addresses for all cloud controllers are not static and might change. Whitelisting based on port/hostname should be preferred.