# Network

---

## Network Considerations

This section describes networking requirements and recommendations for JFrog Platform Deployments

- Networking Routable IP Space and Cluster AZ Deployment for each Component
- The Load Balancer will be a layer 7 public facing load balancer and must have routable external IP address space for incoming and outgoing traffic
- When the JFrog Platform is deployed in three Availability Zones (HA), you need three /24 network IP address space to house JFrog Platform services such as Artifactory, Xray, Distribution, etc.

Please note that the JFrog Platform currently supports only IP address-based communication internally between the services in a single JFrog Platform deployment. This means that it does not support DNS names internally between the services.

### Firewall

The routes between the Load Balancer and JFrog Platform Artifactory should not be blocked.

The network ports that need to be opened are listed in JFrog docs [Network Requirements for JFrog Products](https://docs.jfrog.com/installation/docs/network-requirements-for-jfrog-products)

#### Internal Ports

The JFrog Platform requires the following internal network ports to be opened up for Platform Services to communicate between them.
- All services need port 8082 accessible
- Artifactory requires also port 8081

The external access to the platform would be on port 443 through a load balancer, exposed to external traffic.