Host names and IP addresses for the Boomi Enterprise Platform
Local basic runtimes, runtime clusters, and runtime clouds, as well as Platform users, need to communicate with the Boomi Enterprise Platform and related destinations.
Boomi recommends using the URLs shown here in connection configurations, as these URLs contain fully qualified domain names (FQDN). IP addresses are subject to change, so using these URLs in connection configurations is not recommended.
Communication is over TCP, port 443.
| Destination | Used for | URL | IP addresses |
|---|---|---|---|
| The Boomi Enterprise Platform | Access to Integration, API Management, and Boomi DataHub | https://platform.boomi.com/ | 75.2.102.164, 99.83.130.243 |
| The Platform API | Programmatic access to functionality that is normally accessed through the Boomi Enterprise Platform user interface | https://api.boomi.com/ | 75.2.102.164, 99.83.130.243 |
If you install and maintain local basic runtimes, runtime clusters,or runtime clouds, the machine(s) on which they reside need to be able to connect to the following destinations:
| Destination | URL | IP addresses |
|---|---|---|
| The Boomi Enterprise Platform (for runtime communication with the platform) | https://atom.boomi.com/ | 75.2.102.164, 99.83.130.243 |
| The Boomi Enterprise Platform (for runtime communication with agents)* | https://ai-agent-garden.datalake-prod.boomi.com | 54.82.214.70, 34.225.240.176 |
| The Platform API | https://api.boomi.com/ | 75.2.102.164, 99.83.130.243 |
| The Boomi content delivery web service | https://software.cdn.boomi.com/ | Varies. For more information, see Locations and IP Address Ranges of CloudFront Edge Servers. |
* Requires a subscription to Agentstudio Pro
If you use the Key Management Service for environment extensions feature, your runtimes need to be able to connect to the following destination:
| Destination | URL | IP addresses |
|---|---|---|
| The Boomi KMS | https://vault.boomi.com/ |
Scalability and Performance for Component Downloads
The platform includes an optimized download mechanism that efficiently handles high-volume concurrent downloads during deployments, runtime attachments, and integration pack re-releases and installations. This ensures faster downloads of components to the associated runtimes. This change offers strong scalability and performance benefits, particularly for customers managing large numbers of components and runtimes.
Customers using local installers, private runtime cloud, and runtime cluster are recommended to allowlist the https://component.cdn.boomi.com URL and set the SNI property configuration, jsse.enableSNIExtension or -Djsse.enableSNIExtension property to true. This enables the new download mechanism.
| Destination | URL |
|---|---|
| The Boomi content delivery network | https://component.cdn.boomi.com |
Allowlisting
Boomi does not recommend utilizing a block all policy as the Boomi Enterprise Platform requires additional dependencies (including fonts.googleapi.com and global.oktacdn.com) to be loaded correctly that cannot be listed in their entirety here.
Container log handling
Your runtime will attempt to download runtime updates from Boomi's content delivery network three times before downloading updates from Boomi directly. This fallback procedure produces the following false positive errors in the container and/or firewall log that can be ignored.
Jan 7, 2020 12:09:05 PM EST FINE [com.boomi.restlet.client.ClientUtil handle] [Request: https://qa-software.cdn.boomi.com/updates/update-397580100.zip Attempt: 1]: Re-issuing request.
Jan 7, 2020 12:09:05 PM EST FINE [com.noelios.restlet.ext.net.HttpUrlConnectionCall sendRequest] An error occurred during the connection to the remote HTTP server.
java.net.ConnectException: Connection refused (Connection refused)
at java.net.PlainSocketImpl.socketConnect(Native Method)
at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:350)
at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:206)
at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:188)
at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392)
at java.net.Socket.connect(Socket.java:589)
at sun.security.ssl.SSLSocketImpl.connect(SSLSocketImpl.java:666)
at sun.net.NetworkClient.doConnect(NetworkClient.java:175)
at sun.net.www.http.HttpClient.openServer(HttpClient.java:463)
at sun.net.www.http.HttpClient.openServer(HttpClient.java:558)
at sun.net.www.protocol.https.HttpsClient.<init>(HttpsClient.java:264)
at sun.net.www.protocol.https.HttpsClient.New(HttpsClient.java:367)
at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.getNewHttpClient(AbstractDelegateHttpsURLConnection.java:191)
at sun.net.www.protocol.http.HttpURLConnection.plainConnect0(HttpURLConnection.java:1156)
at sun.net.www.protocol.http.HttpURLConnection.plainConnect(HttpURLConnection.java:1050)
at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:177)
at sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:162)
at com.noelios.restlet.ext.net.HttpUrlConnectionCall.sendRequest(HttpUrlConnectionCall.java:180)
at com.noelios.restlet.http.HttpClientConverter.commit(HttpClientConverter.java:109)
at com.noelios.restlet.http.HttpClientHelper.handle(HttpClientHelper.java:88)
at org.restlet.Client.handle(Client.java:120)
at org.restlet.Uniform.handle(Uniform.java:106)
at com.boomi.restlet.client.ClientUtil.handle(ClientUtil.java:41)
at com.boomi.container.core.FeatureManagerImpl.downloadUpdateArchive(FeatureManagerImpl.java:676)
at com.boomi.container.core.FeatureManagerImpl.downloadUpdateArchive(FeatureManagerImpl.java:623)
at com.boomi.container.core.FeatureManagerImpl.downloadAndExtractFeatures(FeatureManagerImpl.java:567)
at com.boomi.container.core.FeatureManagerImpl.downloadAndInstallContainerUpdate(FeatureManagerImpl.java:506)
at com.boomi.container.core.FeatureManagerImpl.updateContainerImpl(FeatureManagerImpl.java:276)
at com.boomi.container.core.FeatureManagerImpl.access$100(FeatureManagerImpl.java:69)
at com.boomi.container.core.FeatureManagerImpl$3.run(FeatureManagerImpl.java:230)
at java.lang.Thread.run(Thread.java:748)
Jan 7, 2020 12:11:08 PM EST SEVERE [com.boomi.container.core.FeatureManagerImpl downloadUpdateArchive] Request to update Atom URI https://qa-software.cdn.boomi.com/updates/update-397580100.zip failed with a status of Connection Error (1000) Unable to connect to the remote server. Connection refused (Connection refused)
Jan 7, 2020 12:11:08 PM EST WARNING [com.boomi.container.core.FeatureManagerImpl downloadUpdateArchive] Request to download from base URI https://qa-software.cdn.boomi.com failed; default to fallback.
java.io.IOException: Unable to download update file update-397580100.zip
at com.boomi.container.core.FeatureManagerImpl.downloadUpdateArchive(FeatureManagerImpl.java:682)
at com.boomi.container.core.FeatureManagerImpl.downloadUpdateArchive(FeatureManagerImpl.java:623)
at com.boomi.container.core.FeatureManagerImpl.downloadAndExtractFeatures(FeatureManagerImpl.java:567)
at com.boomi.container.core.FeatureManagerImpl.downloadAndInstallContainerUpdate(FeatureManagerImpl.java:506)
at com.boomi.container.core.FeatureManagerImpl.updateContainerImpl(FeatureManagerImpl.java:276)
at com.boomi.container.core.FeatureManagerImpl.access$100(FeatureManagerImpl.java:69)
at com.boomi.container.core.FeatureManagerImpl$3.run(FeatureManagerImpl.java:230)
at java.lang.Thread.run(Thread.java:748)
After these errors, the download will proceed from the Platform URL. You may not see the successful download logged based on your logging level.
Accepting requests from the Boomi Enterprise Platform
The Boomi Enterprise Platform makes outbound calls for actions like OAuth2 token generation and browsing and importing objects for a limited set of connectors.
Communication is over TCP on the port to which the endpoint listens.
| To accept requests made from... | Allow incoming traffic from IP address… |
|---|---|
| The Boomi Enterprise Platform | 18.211.250.250, 18.213.76.189, 34.230.206.22, 35.167.140.28, 52.13.159.123, 52.55.188.121, 54.203.52.160 |
| Agent Garden | 3.214.191.234, 54.210.113.194 |
