Network requirements

Inbound Traffic

Ensure the following inbound ports are open for system access and administrative services:

  • TCP 80 (HTTP): Web traffic / HTTP redirection

  • TCP 443 (HTTPS): Secure web application access

  • TCP 22 (SSH): Remote server administration

  • TCP 5432 (PostgreSQL): Direct database access (optional — open only if external database connections are required)

Outbound Traffic

Repository Access

To download necessary software packages and dependencies, both the SKOOR server and Enduser Experience Monitoring (EEM) collectors require outbound access to the following URLs:

  • https://repo.skoor.com (SKOOR Repository)

  • https://dl.fedoraproject.org (Third-Party Repository)

Time Synchronization

The bootstrap installation installs chronyd, which is preconfigured with standard distribution NTP pools (for example, pool.ntp.org).

To ensure successful time synchronization, choose one of the following network configurations:

  • External NTP: Allow outbound UDP port 123 traffic to the servers listed in /etc/chrony.conf.

  • Internal NTP: Update /etc/chrony.conf to point to a local time server (for example, server <internal-time-server> iburst).

Geocoding Integration

The web service requires outbound network access to maps.googleapis.com over TCP port 443 (HTTPS) to resolve addresses into geographic coordinates.

Generative AI Support (Optional)

By default, the web service uses the Google Generative Language API for AI-assisted code generation in scripts and data queries. To enable this feature, allow outbound network access to generativelanguage.googleapis.com over TCP port 443 (HTTPS).

StableNet Data Source Access (Optional)

To visualize data from StableNet, the server requires network access to the StableNet Web Service and its underlying database:

  • StableNet Web Service: Outbound TCP 5443 to the StableNet server.

  • StableNet Database Access (choose based on your setup):