Skip to main content

Private Operator network egress

A Private Operator connects to the EUID Core and Opt-Out services, and downloads data files directly from AWS S3 using URLs that the Core service provides. For details, see Private Operator workflow.

If your environment restricts outbound network traffic, you must allow outbound HTTPS (port 443) to all of the destinations below, or the operator cannot start.

Integration

The following table lists the hostnames you must allow for the integration environment.

HostnamePurpose
core.integ.euid.euCore Service (attestation, keys, salts, configuration)
optout.integ.euid.euOpt-Out Service
euid-core-integ-store.s3.eu-west-2.amazonaws.comCore data storage
euid-optout-integ-store.s3.eu-west-2.amazonaws.comOpt-out data storage

Production

The following table lists the hostnames you must allow for the production environment.

HostnamePurpose
core.prod.euid.euCore Service (attestation, keys, salts, configuration)
optout.prod.euid.euOpt-Out Service
euid-core-prod-store.s3.eu-west-2.amazonaws.comCore data storage
euid-optout-prod-store.s3.eu-west-2.amazonaws.comOpt-out data storage

Allow these by hostname rather than by IP address, because the underlying addresses might change.