# Networking

Requirements, Public Networking, Private Networking, Streaming Gateway, VPN Configurations

# Networking

Decide on the following before creating your Frame account:

1. How will your users reach their workload VMs? From the Internet or from a private network?
2. Do you want Frame Control Plane to provision and manage the network where the workload VMs reside ("[Frame-managed Networking](#frame-managed-networking)") or whether you wish to manage the network yourself ("[Customer-managed Networking](#customer-managed-networking)")?
3. Will the workload VMs run in a public cloud or on-premises on a Nutanix AHV cluster?

This guide outlines the differences and tradeoffs between Frame-managed versus customer-managed networking and summarizes the network requirements based on the above choices for Frame and network administrators.

## Management Responsibility

<details id="bkmrk-note-considerations-"><summary>Note</summary>

**Considerations**

1. Frame-managed networking is only available when a Frame account is provisioned on public cloud infrastructure.
2. Customer-managed networking is required for Frame accounts provisioned on Nutanix AHV infrastructure.
3. Customer-managed networking is an option for Frame accounts provisioned on customer-managed public cloud infrastructure.
4. Customer-managed networking is not available when using Frame-provided public cloud infrastructure.

</details>### Frame-managed Networking

When Frame-managed networking is selected during Frame account creation in [public cloud](https://docs.difr.com/books/platform-administrators-guide/page/account-creation#public-cloud), Frame will provision all **public cloud** networking elements required for the operation of the platform:

- VPC/VNET
- Subnets
- Routes
- Security groups/firewall rules
- NAT gateway
- DNS
- DHCP
- Load balancer (if required for SGA high availability).

When a Frame account is terminated, Frame control plane will deprovision all network elements it previously provisioned.

<p class="callout info"> If you attach network elements to the Frame-managed VNET or VPC after the Frame account is provisioned, Frame Control Plane will return an error and not deprovision the network elements when you terminate the Frame account.</p>

### Customer-managed Networking

When customer-managed networking is selected during Frame account creation in [public cloud](https://docs.difr.com/books/platform-administrators-guide/page/account-creation#public-cloud) or on [AHV clusters](https://docs.difr.com/books/platform-administrators-guide/page/account-creation#ahv-infrastructure), the customer is responsible for provisioning and managing all **public cloud** or **AHV** networking elements required for the operation of Frame:

- VPC/VNET
- Subnets
- Routes
- Security groups/firewall rules
- NAT gateway
- DNS
- DHCP
- Load balancer (if required for SGA high availability).

The [Frame account creation](https://docs.difr.com/books/platform-administrators-guide/page/account-creation) process requires the following information, which can be obtained from the console of your infrastructure provider. This information dictates where Frame control plane will provision the workload VMs.

<table id="bkmrk-infrastructure-confi"><thead><tr><th align="center">Infrastructure</th><th>Configuration Parameters</th></tr></thead><tbody><tr><td align="center">AWS</td><td>VPC name and CIDR  
Subnet name and CIDR  
Security Group</td></tr><tr><td align="center">Azure</td><td>Resource group name  
VNET name  
Subnet name and CIDR</td></tr><tr><td align="center">AHV</td><td>VLAN name</td></tr><tr><td align="center">GCP</td><td>VPC name  
Subnet name</td></tr></tbody></table>

Frame will only provision and deprovision virtual machines, volumes, and snapshots.

## Requirements

Frame DaaS requires the Frame workload virtual machines (Sandbox, production, test, and Utility server) to be able to communicate with Frame control plane. It also requires end users to be able to communicate with the Frame control plane and the Frame workload VMs. Additionally, for Frame-managed workloads on Nutanix AHV clusters, the Frame Platform must be able to communicate with Prism Element and Prism Central via one or more Frame Cloud Connector Appliances (CCAs), a Frame-provided appliance you deploy in your AHV cluster(s).

Based on your overall configuration (user access, network responsibility, and infrastructure), choose and implement one of the deployment models in [Network Requirements](https://docs.difr.com/books/platform-administrators-guide/page/requirements).

<p class="callout info"> If you choose \*\*customer-managed networking\*\*, you must ensure that your networking (CIDR, routes, security group/firewall rules) meets the \[network requirements\](/platform/networking/requirements) for the deployment model you wish to use \*\*before\*\* you attempt to create a Frame account.</p>

<details id="bkmrk-warning-fqdn-vs.-ip-"><summary>WARNING</summary>

**FQDN vs. IP Address**

Frame protects its control plane from DDoS and external threats using a global content distribution network (CDN) and web application firewall. The public IP addresses associated with the Frame Fully-Qualified Domain Names (FQDNs) may change without notice and vary globally due to this CDN service.

Customers who deploy Frame into a private network (in public cloud or on-premises with AHV) may need to configure their network security appliances to allow Frame workload VMs (and Frame Streaming Gateway Appliances and Cloud Connector Appliances, if required) in their network to communicate with the Frame control plane. These customers are **strongly recommended** to use the Frame Fully-Qualified Domain Names (FQDNs) instead of public IP addresses. Alternatively, they may use an outbound proxy supporting HTTP/HTTPS and Secure WebSocket (WSS) in conjunction with their firewall.

If a customer chooses to use public IP addresses within their security appliances (instead of the Frame FQDNs), customers will need to monitor these Frame control plane DNS records and update their security appliances with the new Frame public IP addresses, if they change.

</details>

# Requirements

## Deployment Models

When deploying Frame workloads, customers can choose from five primary deployment models—**three for public cloud environments** and **two for Nutanix AHV clusters**. The choice of deployment model depends on your organization’s specific use case(s) and security policies. Whether your workloads require public or private networking, or need to leverage static IP addresses or DHCP for dynamic assignment, each Frame account can be tailored to meet these requirements.

For further details on each deployment model and the networking requirements, select the specific hyperlink in the table below.

<p class="callout info"> **Considerations**  
 Customers provisioning Frame accounts in their own network (**customer-managed networking**) in public cloud should select either *Private Networking* or *Private Networking with SGA* deployment models.</p>

<table class="wrap-table" id="bkmrk-deployment-type-depl"><thead><tr><th>Deployment Type</th><th>Deployment Model</th><th>Description</th></tr></thead><tbody><tr><td rowspan="3">**Public Cloud**</td><td>[Public Networking](https://docs.difr.com/books/platform-administrators-guide/page/public-networking-public-cloud)</td><td>All workload VMs (Sandbox, Test, Production, and Utility Server VMs) hosted in a public cloud infrastructure have public IP addresses and are directly accessed by users from the Internet.</td></tr><tr><td>[Private Networking](https://docs.difr.com/books/platform-administrators-guide/page/private-networking-public-cloud)</td><td>All workload VMs (Sandbox, Test, Production, and Utility Server VMs) hosted in a public cloud infrastructure only have private IP addresses. Users must access the workload VMs through a private network connection.</td></tr><tr><td>[Private Networking with SGA](https://docs.difr.com/books/platform-administrators-guide/page/private-networking-with-sga-public-cloud)</td><td>All workload VMs (Sandbox, Test, Production, and Utility Server VMs) hosted in a public cloud infrastructure have private IP addresses. However, users can access the workload VMs through a Streaming Gateway Appliance (SGA) from the Internet.</td></tr><tr><td rowspan="2">**AHV**</td><td>[Private Networking](https://docs.difr.com/books/platform-administrators-guide/page/private-networking-ahv)</td><td>All workload VMs (Sandbox, Test, Production, and Utility Server VMs) hosted on a Nutanix AHV cluster only have private IP addresses. Users must access the workload VMs through a private network connection.</td></tr><tr><td>[Private Networking with SGA](https://docs.difr.com/books/platform-administrators-guide/page/private-networking-with-sga-ahv)</td><td>All workload VMs (Sandbox, Test, Production, and Utility Server VMs) hosted on a Nutanix AHV cluster have private IP addresses. However, users can access the workload VMs through a Streaming Gateway Appliance (SGA) from the Internet.</td></tr></tbody></table>

## Dynamic vs. Static IP Addresses

All Frame-managed workload VMs require access to a DHCP service to obtain a dynamic IP address when they are created. The SGA and CCA Frame appliances, however, can be assigned static IP addresses.

<table class="wrap-table" id="bkmrk-workload-type-ip-add"><thead><tr><th>Workload Type</th><th>IP Address Assignment</th></tr></thead><tbody><tr><td>[Sandbox](https://docs.difr.com/books/platform-administrators-guide/page/sandbox)</td><td rowspan="4">**DHCP (Dynamic IP)**</td></tr><tr><td>[Utility Server](https://docs.difr.com/books/platform-administrators-guide/page/utility-servers)</td></tr><tr><td>[Persistent Desktops](https://docs.difr.com/books/platform-administrators-guide/page/persistent-desktops-administration)</td></tr><tr><td>[Test/Production VMs](https://docs.difr.com/books/platform-administrators-guide/page/capacity)</td></tr><tr><td>[Streaming Gateway Appliance (SGA)](https://docs.difr.com/books/platform-administrators-guide/page/streaming-gateway-appliance)</td><td rowspan="2">**Static IP**</td></tr><tr><td>[Cloud Connector Appliance (AHV only)](https://docs.difr.com/books/platform-administrators-guide/page/nutanix-ahv#bkmrk-connecting-your-ahv-)</td></tr></tbody></table>

# Public Networking (Public Cloud)

Customers using public cloud infrastructure can create a Frame account using Frame-managed networking, Public Networking so users on the Internet can directly access the Frame workload VMs using the public IP addresses of the Frame workload VMs. For egress to the Internet, these workload VMs communicate directly to the Internet for publicly-accessible resources.

If users must access network resources on-premises or in a private network, a [private network connection](https://docs.difr.com/books/platform-administrators-guide/page/vpn-configurations) (e.g., VPN, direct connection, SD-WAN, VPC/VNET peering) with the appropriate routing must be implemented.

<p class="callout info"> To ensure proper network communication to the Frame Platform there are two Backends available depending on which one should be used for the connection for services and VMs please refer to the corresponding networking requirements:  
 [USE ](https://docs.difr.com/link/56#bkmrk-private-networking-%28)(located in the United states- Location AWS us-east-1Virginia)   
 [DEU ](https://docs.difr.com/link/56#bkmrk-deu%3A-private-network)( located in European Union - Location AWS eu-central-1 Frankfurt)</p>

## FRP8 Networking

[FRP8](https://docs.difr.com/books/platform-administrators-guide/page/frame-remoting-protocol#bkmrk-frame-remoting-proto-1) is a udp-based protocol for all communication between the end user and the Frame workload VMs.

![Public IaaS - Public Networking (FRP8)](https://docs.difr.com/uploads/images/gallery/2025-10/public-public-frp8.png)

<p class="callout warning">**<span dir="ltr" role="presentation"> Dizzion is in the process of migrating from \*.nutanix.com to \*.difr.com domain. For the</span>**  
**<span dir="ltr" role="presentation"> time being, the additional</span> <span dir="ltr" role="presentation">difr.com domain</span><span dir="ltr" role="presentation">s will need to be whitelisted</span> <span dir="ltr" role="presentation">in addition to</span> <span dir="ltr" role="presentation">the</span>**  
**<span dir="ltr" role="presentation"> existing nutanix.com domains. At a later</span> <span dir="ltr" role="presentation">time</span><span dir="ltr" role="presentation">, once Dizzion has confirmed there is no</span>**  
**<span dir="ltr" role="presentation"> dependencies on the nutanix.com domains, we will send out a communication notifying</span>**  
**<span dir="ltr" role="presentation"> customers that all nutanix</span><span dir="ltr" role="presentation">.com domains can be safely removed from your whitelist</span>**  
**<span dir="ltr" role="presentation"> configurations.</span>**</p>

<p class="callout danger">**<span dir="ltr" role="presentation"> IMPORTANT:</span> <span dir="ltr" role="presentation">For IMG Domains, Customers can</span> <span dir="ltr" role="presentation">whitelist</span> <span dir="ltr" role="presentation">new IMG difr</span> <span dir="ltr" role="presentation">domains but</span>**  
**<span dir="ltr" role="presentation"> should</span> <span dir="ltr" role="presentation">NOT</span> <span dir="ltr" role="presentation">change SAML 2 configurations to use new</span> <span dir="ltr" role="presentation">difr.com</span> <span dir="ltr" role="presentation">domains. SAML 2</span>**  
**<span dir="ltr" role="presentation"> configurations</span> <span dir="ltr" role="presentation">should continue to use img.console.nutanix.com and</span>**  
**<span dir="ltr" role="presentation"> img.frame.nutanix.com until further direction from Dizzion.</span>**</p>

## USE: Public IaaS - Public Networking (FRP8)

The following table lists the required protocols and ports for Frame accounts using Public Networking and FRP8.

<table class="wrap-table" id="bkmrk-source-to-destinatio" style="width: 100%;"><thead><tr><th style="width: 25.0298%;">Source to Destination

</th><th style="width: 25.0298%;">Source IP address</th><th style="width: 38.8528%;">Destination FQDN(s)</th><th style="width: 11.0876%;">Protocol/port</th></tr></thead><tbody><tr><td style="width: 25.0298%;">Workload VMs to Frame Platform</td><td style="width: 25.0298%;">Public IP address</td><td style="width: 38.8528%;">- <span class="TextRun SCXW197842241 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW197842241 BCX0">api.use.difr.com</span></span><span class="EOP SCXW197842241 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW197842241 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW197842241 BCX0">hub.deu.difr.com</span></span> <span class="EOP SCXW197842241 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW197842241 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW197842241 BCX0">logging.use.difr.com</span></span><span class="EOP SCXW197842241 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW197842241 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW197842241 BCX0">downloads.difr.com</span></span><span class="EOP SCXW197842241 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW197842241 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW197842241 BCX0">download.visualstudio.microsoft.com</span></span>
- <span class="TextRun SCXW213032086 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW213032086 BCX0">gateway-external-api-prod.frame.nutanix.com</span></span> <span class="EOP SCXW213032086 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW213032086 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW213032086 BCX0">downloads.console.nutanix.com</span></span><span class="EOP SCXW213032086 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW213032086 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW213032086 BCX0">logging.console.nutanix.com</span></span><span class="EOP SCXW213032086 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW213032086 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW213032086 BCX0">cch.console.nutanix.com</span></span><span class="EOP SCXW213032086 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 11.0876%;">tcp/443 (HTTPS)</td></tr><tr><td style="width: 25.0298%;">Workload VMs to Frame Platform</td><td style="width: 25.0298%;">Public IP address</td><td style="width: 38.8528%;">- <span class="TextRun SCXW41632702 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW41632702 BCX0">hub.use.difr.com</span></span><span class="EOP SCXW41632702 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW41632702 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW41632702 BCX0">logging.</span><span class="NormalTextRun SCXW41632702 BCX0">use</span><span class="NormalTextRun SCXW41632702 BCX0">.difr.com</span></span><span class="EOP SCXW41632702 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW41632702 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW41632702 BCX0">api.use.difr.com</span></span><span class="EOP SCXW41632702 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW257212460 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW257212460 BCX0">cch.console.nutanix.com</span></span><span class="EOP SCXW257212460 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW257212460 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW257212460 BCX0">logging.console.nutanix.com</span></span><span class="EOP SCXW257212460 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW257212460 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW257212460 BCX0">messaging.console.nutanix.com</span></span><span class="EOP SCXW257212460 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 11.0876%;">tcp/443 (HTTPS, WSS)</td></tr><tr><td style="width: 25.0298%;">Workload VMs to Frame Platform</td><td style="width: 25.0298%;">Public IP address</td><td style="width: 38.8528%;">- <span class="TextRun SCXW67671154 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW67671154 BCX0">stun.use.difr.com</span></span>

<span class="EOP SCXW67671154 BCX0" data-ccp-props="{}"> </span></td><td style="width: 11.0876%;">udp/3478</td></tr><tr><td style="width: 25.0298%;">End user to Frame Platform</td><td style="width: 25.0298%;">Public IP address</td><td style="width: 38.8528%;">- <span class="TextRun SCXW182612331 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW182612331 BCX0">use.difr.com</span></span><span class="EOP SCXW182612331 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW182612331 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW182612331 BCX0">api.use.difr.com</span></span><span class="EOP SCXW182612331 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW182612331 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW182612331 BCX0">img.use.difr.com</span></span><span class="EOP SCXW182612331 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW182612331 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW182612331 BCX0">assets.use.difr.com</span></span><span class="EOP SCXW182612331 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW182612331 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW182612331 BCX0">login.use.difr.com</span></span><span class="EOP SCXW182612331 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW182612331 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW182612331 BCX0">logging.use.difr.com</span></span>
- <span class="TextRun SCXW182612331 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW182612331 BCX0">downloads.difr.com</span></span>
- <span class="TextRun SCXW34162689 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun CommentStart CommentHighlightPipeRest CommentHighlightRest SCXW34162689 BCX0">console.nutanix.com</span></span>
- <span class="TextRun SCXW34162689 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW34162689 BCX0">img.frame.nutanix.com</span></span>
- <span class="TextRun SCXW34162689 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW34162689 BCX0">img.console.nutanix.com</span></span>
- <span class="TextRun SCXW34162689 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW34162689 BCX0">cpanel-backend.console.nutanix.com</span></span>
- <span class="TextRun SCXW34162689 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW34162689 BCX0">terminal-prod.frame.nutanix.com</span></span>
- <span class="TextRun SCXW34162689 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW34162689 BCX0">logging.console.nutanix.com</span></span><span class="EOP SCXW34162689 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW34162689 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW34162689 BCX0">login.console.nutanix.com (for Frame IdP, if used)</span></span><span class="EOP SCXW34162689 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 11.0876%;">tcp/443 (HTTPS)</td></tr><tr><td style="width: 25.0298%;">End user to Frame Platform</td><td style="width: 25.0298%;">Public IP address</td><td style="width: 38.8528%;">- <span class="TextRun SCXW24713369 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW24713369 BCX0">api.use.difr.com</span></span><span class="EOP SCXW24713369 BCX0" data-ccp-props="{}"> </span>
- <span class="EOP SCXW24713369 BCX0" data-ccp-props="{}"><span class="TextRun SCXW52250261 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW52250261 BCX0">messaging.console.nutanix.com</span></span><span class="EOP SCXW52250261 BCX0" data-ccp-props="{}"> </span></span>

</td><td style="width: 11.0876%;">tcp/443 (HTTPS, WSS)</td></tr><tr><td style="width: 25.0298%;">End user to Workload VM</td><td style="width: 25.0298%;">Public IP address</td><td style="width: 38.8528%;">- <span class="TextRun SCXW67719475 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW67719475 BCX0">Workload’s dynamic private IP address within VPC/VNET</span></span><span class="EOP SCXW67719475 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 11.0876%;">udp/4503-4509, tcp/4503-4509 (optional)</td></tr></tbody></table>

## DEU: Public IaaS - Public Networking (FRP8

The following table lists the required protocols and ports for Frame accounts using Public Networking and FRP8, specifically for organizations electing to use Dizzion's EU control plane.

DEU: Public Networking (Public Cloud)

<table class="wrap-table" id="bkmrk-source-to-destinatio-1" style="width: 100%;"><thead><tr><th style="width: 25.0298%;">Source to Destination</th><th style="width: 25.0298%;">Source IP address</th><th style="width: 38.8549%;">Destination FQDN(s)</th><th style="width: 11.0855%;">Protocol/port</th></tr></thead><tbody><tr><td style="width: 25.0298%;">Workload VMs to Frame Platform</td><td style="width: 25.0298%;">Public IP address</td><td style="width: 38.8549%;">- <span class="TextRun SCXW138842203 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW138842203 BCX0">api.deu.difr.com</span></span><span class="EOP SCXW138842203 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW138842203 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW138842203 BCX0">hub.deu.difr.com</span></span><span class="EOP SCXW138842203 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW138842203 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW138842203 BCX0">logging.deu.difr.com</span></span><span class="EOP SCXW138842203 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW138842203 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW138842203 BCX0">downloads.difr.com</span></span><span class="EOP SCXW138842203 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW138842203 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW138842203 BCX0">download.visualstudio.microsoft.com</span></span><span class="EOP SCXW138842203 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 11.0855%;">tcp/443 (HTTPS)</td></tr><tr><td style="width: 25.0298%;">Workload VMs to Frame Platform</td><td style="width: 25.0298%;">Public IP address</td><td style="width: 38.8549%;">- <span class="TextRun SCXW203721781 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW203721781 BCX0">hub.deu.difr.com</span></span><span class="EOP SCXW203721781 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW203721781 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW203721781 BCX0">logging.deu.difr.com</span></span><span class="EOP SCXW203721781 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW203721781 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW203721781 BCX0">api.deu.difr.com</span></span><span class="EOP SCXW203721781 BCX0" data-ccp-props="{}"> </span>

<span class="EOP SCXW203721781 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 11.0855%;">tcp/443 (HTTPS, WSS)</td></tr><tr><td style="width: 25.0298%;">Workload VMs to Frame Platform</td><td style="width: 25.0298%;">Public IP address</td><td style="width: 38.8549%;">- <span class="TextRun SCXW70989494 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW70989494 BCX0">stun.deu.difr.com</span></span>

<span class="EOP SCXW70989494 BCX0" data-ccp-props="{}"> </span></td><td style="width: 11.0855%;">udp/3478</td></tr><tr><td style="width: 25.0298%;">End user to Frame Platform</td><td style="width: 25.0298%;">Public IP address</td><td style="width: 38.8549%;">- <span class="TextRun SCXW201068701 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW201068701 BCX0">deu.difr.com</span></span><span class="EOP SCXW201068701 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW201068701 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW201068701 BCX0">api.deu.difr.com</span></span><span class="EOP SCXW201068701 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW201068701 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SpellingErrorV2Themed SCXW201068701 BCX0">img</span><span class="NormalTextRun SCXW201068701 BCX0">.deu.difr.com</span></span><span class="EOP SCXW201068701 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW201068701 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW201068701 BCX0">assets.deu.difr.com</span></span><span class="EOP SCXW201068701 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW201068701 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun ContextualSpellingAndGrammarErrorV2Themed SCXW201068701 BCX0">login</span><span class="NormalTextRun SCXW201068701 BCX0">.deu.difr.com</span></span><span class="EOP SCXW201068701 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW201068701 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun ContextualSpellingAndGrammarErrorV2Themed SCXW201068701 BCX0">logging</span><span class="NormalTextRun SCXW201068701 BCX0">.deu.difr.com</span></span><span class="EOP SCXW201068701 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW201068701 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW201068701 BCX0">downloads.difr.com</span></span><span class="EOP SCXW201068701 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 11.0855%;">tcp/443 (HTTPS)</td></tr><tr><td style="width: 25.0298%;">End user to Frame Platform</td><td style="width: 25.0298%;">Public IP address</td><td style="width: 38.8549%;">- <span class="TextRun SCXW242729552 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW242729552 BCX0">api.deu.difr.com</span></span>

<span class="EOP SCXW242729552 BCX0" data-ccp-props="{}"> </span></td><td style="width: 11.0855%;">tcp/443 (HTTPS, WSS)</td></tr><tr><td style="width: 25.0298%;">End user to Workload VM</td><td style="width: 25.0298%;">Public IP address</td><td style="width: 38.8549%;">- <span class="TextRun SCXW67719475 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW67719475 BCX0">Workload’s dynamic private IP address within VPC/VNET</span></span><span class="EOP SCXW67719475 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 11.0855%;">udp/4503-4509, tcp/4503-4509 (optional)</td></tr></tbody></table>

#### FRP7 Networking End of Life

**<span style="color: rgb(224, 62, 45);">Warning</span>**  
**<span style="color: rgb(224, 62, 45);">FRP7 reached end-of-life (EOL) effective June 30, 2024. Refer to the EOL Announcement of December 18, 2023 for further details.</span>**

# Private Networking (Public Cloud)

Customers using public cloud infrastructure can create a Frame account using Frame-managed networking, Private Networking so users must access the Frame workload VMs using the private IP addresses of the Frame workload VMs. Since the Frame workload VMs have no public IP addresses, the customer must provide a network path between the end user and the private Frame workload VMs. For egress to the Internet, these workload VMs communicate directly to the Internet through a NAT gateway in the public cloud infrastructure.

<p class="callout info"> Customers who choose to create a Frame account in their own managed network where all users access the Frame workload VMs within their private network must follow the networking requirements defined below.</p>

If users must access network resources on-premises or in a private network, a [private network connection](https://docs.difr.com/books/platform-administrators-guide/page/vpn-configurations) (e.g., VPN, direct connection, SD-WAN, VPC/VNET peering) with the appropriate routing must be implemented.

<p class="callout info"> To ensure proper network communication to the Frame Platform there are two Backends available depending on which one should be used for the connection for services and VMs please refer to the corresponding networking requirements:  
 [USE ](https://docs.difr.com/link/56#bkmrk-private-networking-%28)(located in the United states- Location AWS Datacenter Virginia)   
 [DEU ](https://docs.difr.com/link/56#bkmrk-deu%3A-private-network)( located in European Union - Location AWS Datacenter Frankfurt)</p>

## FRP8 Networking

[FRP8](https://docs.difr.com/books/platform-administrators-guide/page/frame-remoting-protocol#bkmrk-frame-remoting-proto-1) is a udp-based protocol for all communication between the end user and the Frame workload VMs.

<figure id="bkmrk-public-iaas---privat">![Public IaaS - Private Networking (FRP8)](https://docs.difr.com/uploads/images/gallery/2025-10/public-private-frp8.png)

<figcaption>Public IaaS - Private Networking (FRP8)</figcaption></figure>The following table describes the required protocols and ports for Frame accounts using Private Networking and FRP8.

<p class="callout warning">**<span dir="ltr" role="presentation"> Dizzion is in the process of migrating from \*.nutanix.com to \*.difr.com domain. For the</span>**  
**<span dir="ltr" role="presentation"> time being, the additional</span> <span dir="ltr" role="presentation">difr.com domain</span><span dir="ltr" role="presentation">s will need to be whitelisted</span> <span dir="ltr" role="presentation">in addition to</span> <span dir="ltr" role="presentation">the</span>**  
**<span dir="ltr" role="presentation"> existing nutanix.com domains. At a later</span> <span dir="ltr" role="presentation">time</span><span dir="ltr" role="presentation">, once Dizzion has confirmed there is no</span>**  
**<span dir="ltr" role="presentation"> dependencies on the nutanix.com domains, we will send out a communication notifying</span>**  
**<span dir="ltr" role="presentation"> customers that all nutanix</span><span dir="ltr" role="presentation">.com domains can be safely removed from your whitelist</span>**  
**<span dir="ltr" role="presentation"> configurations.</span>**</p>

<p class="callout danger">**<span dir="ltr" role="presentation"> IMPORTANT: For IMG Domains, Customers can whitelist new IMG difr domains but  
 should NOT change SAML 2 configurations to use new difr.com domains. SAML 2  
 configurations should continue to use img.console.nutanix.com and  
 img.frame.nutanix.com until further direction from Dizzion.</span>**</p>

## USE: Private Networking (Public Cloud)

<div class="wrap-table" id="bkmrk-source-to-destinatio"><div class="table-container"><table class="wrap-table" style="width: 100%; height: 935.063px;"><thead><tr style="height: 59.5625px;"><th style="width: 25.0298%; height: 59.5625px;">Source to Destination</th><th style="width: 25.0298%; height: 59.5625px;">Source IP address</th><th style="width: 39.8075%; height: 59.5625px;">Destination FQDN(s)</th><th style="width: 10.2521%; height: 59.5625px;">Protocol/port</th></tr></thead><tbody><tr style="height: 217.922px;"><td style="width: 25.0298%; height: 217.922px;">Workload VMs to Frame Platform</td><td style="width: 25.0298%; height: 217.922px;">Public IP address</td><td style="width: 39.8075%; height: 217.922px;">- <span class="TextRun SCXW101316735 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW101316735 BCX0">api.use.difr.com</span></span><span class="EOP SCXW101316735 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW101316735 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW101316735 BCX0">hub.deu.difr.com</span></span><span class="EOP SCXW101316735 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW101316735 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW101316735 BCX0">logging.use.difr.com</span></span><span class="EOP SCXW101316735 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW101316735 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW101316735 BCX0">downloads.difr.com</span></span><span class="EOP SCXW101316735 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW101316735 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW101316735 BCX0">download.visualstudio.microsoft.com</span></span><span class="EOP SCXW101316735 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW213032086 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW213032086 BCX0">gateway-external-api-prod.frame.nutanix.com</span></span>
- <span class="TextRun SCXW25493509 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW25493509 BCX0">downloads.console.nutanix.com</span></span><span class="EOP SCXW25493509 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW25493509 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW25493509 BCX0">logging.console.nutanix.com</span></span><span class="EOP SCXW25493509 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW25493509 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW25493509 BCX0">cch.console.nutanix.com</span></span><span class="EOP SCXW25493509 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 10.2521%; height: 217.922px;">tcp/443 (HTTPS)</td></tr><tr style="height: 148.797px;"><td style="width: 25.0298%; height: 148.797px;">Workload VMs to Frame Platform</td><td style="width: 25.0298%; height: 148.797px;">Public IP address</td><td style="width: 39.8075%; height: 148.797px;">- <span class="TextRun SCXW209674647 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW209674647 BCX0">hub.use.difr.com</span></span><span class="EOP SCXW209674647 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW209674647 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW209674647 BCX0">logging.</span><span class="NormalTextRun SCXW209674647 BCX0">use</span><span class="NormalTextRun SCXW209674647 BCX0">.difr.com</span></span><span class="EOP SCXW209674647 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW209674647 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW209674647 BCX0">api.use.difr.com</span></span><span class="EOP SCXW209674647 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW157897686 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW157897686 BCX0">cch.console.nutanix.com</span></span><span class="EOP SCXW157897686 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW157897686 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW157897686 BCX0">logging.console.nutanix.com</span></span><span class="EOP SCXW157897686 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW157897686 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW157897686 BCX0">messaging.console.nutanix.com</span></span><span class="EOP SCXW157897686 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 10.2521%; height: 148.797px;">tcp/443 (HTTPS, WSS)</td></tr><tr style="height: 338.891px;"><td style="width: 25.0298%; height: 338.891px;">End user to Frame Platform</td><td style="width: 25.0298%; height: 338.891px;">Public IP address</td><td style="width: 39.8075%; height: 338.891px;">- <span class="TextRun SCXW130197537 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW130197537 BCX0">use.difr.com</span></span><span class="EOP SCXW130197537 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW130197537 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW130197537 BCX0">api.use.difr.com</span></span><span class="EOP SCXW130197537 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW130197537 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW130197537 BCX0">img.use.difr.com</span></span><span class="EOP SCXW130197537 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW130197537 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW130197537 BCX0">assets.use.difr.com</span></span><span class="EOP SCXW130197537 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW130197537 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW130197537 BCX0">login.use.difr.com</span></span><span class="EOP SCXW130197537 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW130197537 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW130197537 BCX0">logging.use.difr.com</span></span><span class="EOP SCXW130197537 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW130197537 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW130197537 BCX0">downloads.difr.com</span></span><span class="EOP SCXW130197537 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW66573783 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun CommentStart CommentHighlightPipeRest CommentHighlightRest SCXW66573783 BCX0">c</span><span class="NormalTextRun CommentHighlightRest SCXW66573783 BCX0">onsole.nutanix</span><span class="NormalTextRun CommentHighlightRest SCXW66573783 BCX0">.com</span></span><span class="EOP CommentHighlightPipeRest SCXW66573783 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW66573783 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW66573783 BCX0">img.frame.nutanix.com</span></span><span class="EOP SCXW66573783 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW66573783 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW66573783 BCX0">img.console.nutanix.com</span></span><span class="EOP SCXW66573783 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW66573783 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW66573783 BCX0">cpanel-backend.console.nutanix.com</span></span><span class="EOP SCXW66573783 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW66573783 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW66573783 BCX0">terminal-prod.frame.nutanix.com</span></span><span class="EOP SCXW66573783 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW66573783 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW66573783 BCX0">logging.console.nutanix.com</span></span><span class="EOP SCXW66573783 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW66573783 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW66573783 BCX0">login.console.nutanix.com (for Frame IdP, if used)</span></span><span class="EOP SCXW66573783 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 10.2521%; height: 338.891px;">tcp/443 (HTTPS)</td></tr><tr style="height: 84.375px;"><td style="width: 25.0298%; height: 84.375px;">End user to Frame Platform</td><td style="width: 25.0298%; height: 84.375px;">Public IP address</td><td style="width: 39.8075%; height: 84.375px;">- <span class="TextRun SCXW91067416 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW91067416 BCX0">api.use.difr.com</span></span><span class="EOP SCXW91067416 BCX0" data-ccp-props="{}"> </span>
- <span class="EOP SCXW91067416 BCX0" data-ccp-props="{}"><span class="TextRun SCXW249124552 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW249124552 BCX0">messaging.console.nutanix.com</span></span><span class="EOP SCXW249124552 BCX0" data-ccp-props="{}"> </span></span>

</td><td style="width: 10.2521%; height: 84.375px;">tcp/443 (HTTPS, WSS)</td></tr><tr style="height: 85.516px;"><td style="width: 25.0298%; height: 85.516px;">End user to Workload VM</td><td style="width: 25.0298%; height: 85.516px;">Private IP address</td><td style="width: 39.8075%; height: 85.516px;">- <span class="TextRun SCXW109713498 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW109713498 BCX0">Workload’s dynamic private IP address within VPC/VNET</span></span><span class="EOP SCXW109713498 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 10.2521%; height: 85.516px;">udp/4503-4509, tcp/4503-4509 (optional)</td></tr></tbody></table>

</div></div>## FRP8 Networking - EU

The following table lists the required protocols and ports for Frame accounts using Private Networking and FRP8, specifically for organizations electing to use Dizzion's EU control plane.

## DEU: Private Networking (Public Cloud)

<div class="wrap-table" id="bkmrk-source-to-destinatio-1">  
<div class="table-container"><table class="wrap-table" style="width: 100%;"><thead><tr><th style="width: 25.0298%;">Source to Destination</th><th style="width: 25.0298%;">Source IP address</th><th style="width: 39.5536%;">Destination FQDN(s)</th><th style="width: 10.506%;">Protocol/port</th></tr></thead><tbody><tr><td style="width: 25.0298%;">Workload VMs to Frame Platform</td><td style="width: 25.0298%;">Public IP address</td><td style="width: 39.5536%;">- <span class="TextRun SCXW113671561 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW113671561 BCX0">api.deu.difr.com</span></span><span class="EOP SCXW113671561 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW113671561 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW113671561 BCX0">hub.deu.difr.com</span></span><span class="EOP SCXW113671561 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW113671561 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW113671561 BCX0">logging.deu.difr.com</span></span><span class="EOP SCXW113671561 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW113671561 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW113671561 BCX0">downloads.difr.com</span></span><span class="EOP SCXW113671561 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW113671561 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW113671561 BCX0">download.visualstudio.microsoft.com</span></span><span class="EOP SCXW113671561 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 10.506%;">tcp/443 (HTTPS)</td></tr><tr><td style="width: 25.0298%;">Workload VMs to Frame Platform</td><td style="width: 25.0298%;">Public IP address</td><td style="width: 39.5536%;">- <span class="TextRun SCXW18862686 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW18862686 BCX0">hub.deu.difr.com</span></span><span class="EOP SCXW18862686 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW18862686 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW18862686 BCX0">logging.deu.difr.com</span></span><span class="EOP SCXW18862686 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW18862686 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW18862686 BCX0">api.deu.difr.com</span></span><span class="EOP SCXW18862686 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 10.506%;">tcp/443 (HTTPS, WSS)</td></tr><tr><td style="width: 25.0298%;">End user to Frame Platform</td><td style="width: 25.0298%;">Public IP address</td><td style="width: 39.5536%;">- <span class="TextRun SCXW232137899 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW232137899 BCX0">deu.difr.com</span></span><span class="EOP SCXW232137899 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW232137899 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW232137899 BCX0">api.deu.difr.com</span></span><span class="EOP SCXW232137899 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW232137899 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SpellingErrorV2Themed SCXW232137899 BCX0">img</span><span class="NormalTextRun SCXW232137899 BCX0">.deu.difr.com</span></span><span class="EOP SCXW232137899 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW232137899 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW232137899 BCX0">assets.deu.difr.com</span></span><span class="EOP SCXW232137899 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW232137899 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun ContextualSpellingAndGrammarErrorV2Themed SCXW232137899 BCX0">login</span><span class="NormalTextRun SCXW232137899 BCX0">.deu.difr.com</span></span><span class="EOP SCXW232137899 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW232137899 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun ContextualSpellingAndGrammarErrorV2Themed SCXW232137899 BCX0">logging</span><span class="NormalTextRun SCXW232137899 BCX0">.deu.difr.com</span></span><span class="EOP SCXW232137899 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW232137899 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW232137899 BCX0">downloads.difr.com</span></span><span class="EOP SCXW232137899 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 10.506%;">tcp/443 (HTTPS)</td></tr><tr><td style="width: 25.0298%;">End user to Frame Platform</td><td style="width: 25.0298%;">Public IP address</td><td style="width: 39.5536%;">- <span class="TextRun SCXW201038858 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW201038858 BCX0">api.deu.difr.com</span></span><span class="EOP SCXW201038858 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 10.506%;">tcp/443 (HTTPS, WSS)</td></tr><tr><td style="width: 25.0298%; height: 85.516px;">End user to Workload VM</td><td style="width: 25.0298%; height: 85.516px;">Private IP address</td><td style="width: 39.5536%; height: 85.516px;">- <span class="TextRun SCXW109713498 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW109713498 BCX0">Workload’s dynamic private IP address within VPC/VNET</span></span><span class="EOP SCXW109713498 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 10.506%; height: 85.516px;">udp/4503-4509, tcp/4503-4509 (optional)</td></tr></tbody></table>

</div></div>### FRP7 Networking [<span class="badge frame-badge badge--eol margin-left--xs cursor-pointer hover:opacity-90">End of Life</span>](https://docs.dizzion.com/support#dizzion-product-release-stages "View Product Release Stages Documentation")

<div class="theme-admonition theme-admonition-warning admonition_xJq3 alert alert--warning" id="bkmrk-warning"><div class="admonitionHeading_Gvgb"><span style="color: rgb(186, 55, 42);">**Warning**</span></div></div><span style="color: rgb(186, 55, 42);">**FRP7 reached end-of-life (EOL) as of June 30, 2024. Refer to the [EOL Announcement of December 18, 2023](https://docs.dizzion.com/releases/2023/12/18/announcement) for further details.**</span>

# Private Networking with SGA (Public Cloud)

Customers using public cloud infrastructure can create a Frame account using Frame-managed networking, Private Networking with Streaming Gateway Appliance (SGA) so users can access the Frame workload VMs through the SGA. The Internet-accessible SGA serves as a reverse proxy for Frame sessions between the end users and their Frame workload VMs in the private network. The Frame workload VMs only have private IP addresses. For egress from the workload VMs to the Internet, these workload VMs are configured to communicate directly to the Internet through a NAT gateway in the public cloud infrastructure.

If users must access network resources on-premises or in a private network, a [private network connection](https://docs.difr.com/books/platform-administrators-guide/page/vpn-configurations) (e.g., VPN, direct connection, SD-WAN, VPC/VNET peering) with the appropriate routing must be implemented.

<p class="callout warning"> Customers who choose to create a Frame account in their own managed network where users will access the Frame workload VMs from the Internet through an SGA must follow the networking requirements defined below.</p>

<p class="callout info"> To ensure proper network communication to the Frame Platform there are two Backends available depending on which one should be used for the connection for services and VMs please refer to the corresponding networking requirements:  
 [USE ](https://docs.difr.com/link/56#bkmrk-private-networking-%28)(located in the United states- Location AWS Datacenter Virginia)   
 [DEU ](https://docs.difr.com/link/56#bkmrk-deu%3A-private-network)( located in European Union - Location AWS Datacenter Frankfurt)</p>

## FRP8 Networking (SGA 4)

[FRP8](https://docs.difr.com/books/platform-administrators-guide/page/frame-remoting-protocol#bkmrk-frame-remoting-proto-1) is a udp-based protocol for all communication between the end user and the Frame workload VMs.

<figure id="bkmrk-public-iaas---privat">![Public IaaS - Private Networking with SGA 4 (FRP8)](https://docs.difr.com/uploads/images/gallery/2025-10/public-private-sga4-frp8.png)

<figcaption>Public IaaS - Private Networking with SGA 4 (FRP8)</figcaption></figure>The following table describes the required protocols and ports for Frame accounts using Private Networking with SGA 4 and FRP8.

<p class="callout warning">**<span dir="ltr" role="presentation"> Dizzion is in the process of migrating from \*.nutanix.com to \*.difr.com domain. For the</span>**  
**<span dir="ltr" role="presentation"> time being, the additional</span> <span dir="ltr" role="presentation">difr.com domain</span><span dir="ltr" role="presentation">s will need to be whitelisted</span> <span dir="ltr" role="presentation">in addition to</span> <span dir="ltr" role="presentation">the</span>**  
**<span dir="ltr" role="presentation"> existing nutanix.com domains. At a later</span> <span dir="ltr" role="presentation">time</span><span dir="ltr" role="presentation">, once Dizzion has confirmed there is no</span>**  
**<span dir="ltr" role="presentation"> dependencies on the nutanix.com domains, we will send out a communication notifying</span>**  
**<span dir="ltr" role="presentation"> customers that all nutanix</span><span dir="ltr" role="presentation">.com domains can be safely removed from your whitelist</span>**  
**<span dir="ltr" role="presentation"> configurations.</span>**</p>

<p class="callout danger">**<span dir="ltr" role="presentation"> IMPORTANT:</span> <span dir="ltr" role="presentation">For IMG Domains, Customers can</span> <span dir="ltr" role="presentation">whitelist</span> <span dir="ltr" role="presentation">new IMG difr</span> <span dir="ltr" role="presentation">domains but</span>**  
**<span dir="ltr" role="presentation"> should</span> <span dir="ltr" role="presentation">NOT</span> <span dir="ltr" role="presentation">change SAML 2 configurations to use new</span> <span dir="ltr" role="presentation">difr.com</span> <span dir="ltr" role="presentation">domains. SAML 2</span>**  
**<span dir="ltr" role="presentation"> configurations</span> <span dir="ltr" role="presentation">should continue to use img.console.nutanix.com and</span>**  
**<span dir="ltr" role="presentation"> img.frame.nutanix.com until further direction from Dizzion.</span>**</p>

## USE: Private Networking (Public Cloud) - Streaming Gateway 4

<div class="wrap-table" id="bkmrk-source-to-destinatio"><div class="table-container"><table class="wrap-table" style="width: 100%;"><thead><tr><th style="width: 23.7187%;">Source to Destination</th><th style="width: 21.3349%;">Source IP address</th><th style="width: 41.9441%;">Destination FQDN(s)</th><th style="width: 13.1215%;">Protocol/port</th></tr></thead><tbody><tr><td style="width: 23.7187%;">Workload VMs to Frame Platform</td><td style="width: 21.3349%;">Public IP address</td><td style="width: 41.9441%;">- <span class="TextRun SCXW80693059 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW80693059 BCX0">api.use.difr.com</span></span><span class="EOP SCXW80693059 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW80693059 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW80693059 BCX0">hub.deu.difr.com</span></span><span class="EOP SCXW80693059 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW80693059 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW80693059 BCX0">logging.use.difr.com</span></span><span class="EOP SCXW80693059 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW80693059 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW80693059 BCX0">downloads.difr.com</span></span><span class="EOP SCXW80693059 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW80693059 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW80693059 BCX0">download.visualstudio.microsoft.com</span></span><span class="EOP SCXW80693059 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW153883077 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW153883077 BCX0">gateway-external-api-</span></span>
- <span class="TextRun SCXW153883077 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW153883077 BCX0">downloads.console.nutanix.com</span></span><span class="EOP SCXW153883077 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW153883077 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW153883077 BCX0">logging.console.nutanix.com</span></span><span class="EOP SCXW153883077 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW153883077 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW153883077 BCX0">cch.console.nutanix.com</span></span><span class="EOP SCXW153883077 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 13.1215%;">tcp/443 (HTTPS)</td></tr><tr><td style="width: 23.7187%;">Workload VMs to Frame Platform</td><td style="width: 21.3349%;">Public IP address</td><td style="width: 41.9441%;">- <span class="NormalTextRun SCXW145593086 BCX0">hub.use.difr.com</span><span class="EOP SCXW145593086 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW145593086 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW145593086 BCX0">logging.</span><span class="NormalTextRun SCXW145593086 BCX0">use</span><span class="NormalTextRun SCXW145593086 BCX0">.difr.com</span></span><span class="EOP SCXW145593086 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW145593086 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW145593086 BCX0">api.use.difr.com</span></span><span class="EOP SCXW145593086 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW55668491 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW55668491 BCX0">cch.console.nutanix.com</span></span><span class="EOP SCXW55668491 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW55668491 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW55668491 BCX0">logging.console.nutanix.com</span></span><span class="EOP SCXW55668491 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 13.1215%;">tcp/443 (HTTPS, WSS)</td></tr><tr><td style="width: 23.7187%;">End user to Frame Platform</td><td style="width: 21.3349%;">Public IP address</td><td style="width: 41.9441%;">- <span class="NormalTextRun SCXW64786097 BCX0">use.difr.com</span><span class="EOP SCXW64786097 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW64786097 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW64786097 BCX0">api.use.difr.com</span></span><span class="EOP SCXW64786097 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW64786097 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW64786097 BCX0">img.use.difr.com</span></span><span class="EOP SCXW64786097 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW64786097 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW64786097 BCX0">assets.use.difr.com</span></span><span class="EOP SCXW64786097 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW64786097 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW64786097 BCX0">login.use.difr.com</span></span><span class="EOP SCXW64786097 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW64786097 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW64786097 BCX0">logging.use.difr.com</span></span><span class="EOP SCXW64786097 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW64786097 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW64786097 BCX0">downloads.difr.com</span></span><span class="EOP SCXW64786097 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW151176972 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun CommentStart CommentHighlightPipeRest CommentHighlightRest SCXW151176972 BCX0">console.nutanix.com</span></span><span class="EOP CommentHighlightPipeRest SCXW151176972 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW151176972 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW151176972 BCX0">img.frame.nutanix.com</span></span><span class="EOP SCXW151176972 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW151176972 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW151176972 BCX0">img.console.nutanix.com</span></span><span class="EOP SCXW151176972 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW151176972 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW151176972 BCX0">cpanel-backend.console.nutanix.com</span></span><span class="EOP SCXW151176972 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW151176972 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW151176972 BCX0">terminal-prod.frame.nutanix.com</span></span><span class="EOP SCXW151176972 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW151176972 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW151176972 BCX0">logging.console.nutanix.com</span></span><span class="EOP SCXW151176972 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW151176972 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW151176972 BCX0">login.console.nutanix.com (for Frame IdP, if used)</span></span><span class="EOP SCXW151176972 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 13.1215%;">tcp/443 (HTTPS)</td></tr><tr><td style="width: 23.7187%;">End user to Frame Platform</td><td style="width: 21.3349%;">Public IP address</td><td style="width: 41.9441%;">- <span class="TextRun SCXW239256747 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW239256747 BCX0">api.use.difr.com</span></span><span class="EOP SCXW239256747 BCX0" data-ccp-props="{}"> </span>
- <span class="EOP SCXW239256747 BCX0" data-ccp-props="{}"><span class="TextRun SCXW43704732 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW43704732 BCX0">messaging.console.nutanix.com</span></span><span class="EOP SCXW43704732 BCX0" data-ccp-props="{}"> </span></span>

</td><td style="width: 13.1215%;">tcp/443 (HTTPS, WSS)</td></tr><tr><td style="width: 23.7187%;">SGA VMs to Frame Platform</td><td style="width: 21.3349%;">Public IP address</td><td style="width: 41.9441%;">- <span class="TextRun SCXW18403253 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW18403253 BCX0">hub.use.difr.com</span></span><span class="EOP SCXW18403253 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW18403253 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW18403253 BCX0">ntp.ubuntu.com</span></span><span class="EOP SCXW18403253 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW18403253 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW18403253 BCX0">api.snapcraft.io</span></span><span class="EOP SCXW18403253 BCX0" data-ccp-props="{}"> </span>
- <span class="EOP SCXW18403253 BCX0" data-ccp-props="{}"><span class="TextRun SCXW144514475 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW144514475 BCX0">cch.console.nutanix.com</span></span><span class="EOP SCXW144514475 BCX0" data-ccp-props="{}"> </span></span>

</td><td style="width: 13.1215%;">tcp/443 (HTTPS, WSS)</td></tr><tr><td style="width: 23.7187%;">End user to SGA VM</td><td style="width: 21.3349%;">Public IP address</td><td style="width: 41.9441%;">- <span class="TextRun SCXW118098946 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW118098946 BCX0">SGA VM-specific public IP address</span></span>

<span class="EOP SCXW118098946 BCX0" data-ccp-props="{}"> </span></td><td style="width: 13.1215%;">udp/3478 and tcp/3478</td></tr><tr><td style="width: 23.7187%;">SGA VM to End user</td><td style="width: 21.3349%;">Public IP address</td><td style="width: 41.9441%;">- <span class="TextRun SCXW226936122 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW226936122 BCX0">End user-specific public IP address</span></span>

<span class="EOP SCXW226936122 BCX0" data-ccp-props="{}"> </span></td><td style="width: 13.1215%;">udp/49152–65535</td></tr><tr><td style="width: 23.7187%;">SGA VM to Workload VM</td><td style="width: 21.3349%;">Private IP address</td><td style="width: 41.9441%;">- <span class="TextRun SCXW242350850 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW242350850 BCX0">Dynamic private IP address within VPC/VNET</span></span>

<span class="EOP SCXW242350850 BCX0" data-ccp-props="{}"> </span></td><td style="width: 13.1215%;">udp/4503–4509</td></tr><tr><td style="width: 23.7187%;">Workload VM to SGA VM</td><td style="width: 21.3349%;">Private IP address</td><td style="width: 41.9441%;">- <span class="TextRun SCXW120089714 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW120089714 BCX0">SGA VM-specific private IP address</span></span>

<span class="EOP SCXW120089714 BCX0" data-ccp-props="{}"> </span></td><td style="width: 13.1215%;">udp/49152–65535</td></tr></tbody></table>

</div></div>## FRP8 Networking (SGA 4) 

The following table lists the required protocols and ports for Frame accounts using Private Networking with SGA 4 and FRP8, specifically for organizations electing to use Dizzion's EU control plane.

## DEU: Private Networking (Public Cloud) - Streaming Gateway 4

<div class="wrap-table" id="bkmrk-source-to-destinatio-1">  
<div class="table-container"><table class="wrap-table" style="width: 100%;"><thead><tr><th style="width: 25.0298%;">Source to Destination</th><th style="width: 25.0298%;">Source IP address</th><th style="width: 36.7011%;">Destination FQDN(s)</th><th style="width: 13.3584%;">Protocol/port</th></tr></thead><tbody><tr><td style="width: 25.0298%;">Workload VMs to Frame Platform</td><td style="width: 25.0298%;">Public IP address</td><td style="width: 36.7011%;">- <span class="TextRun SCXW46264573 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW46264573 BCX0">api.deu.difr.com</span></span><span class="EOP SCXW46264573 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW46264573 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW46264573 BCX0">hub.deu.difr.com</span></span><span class="EOP SCXW46264573 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW46264573 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW46264573 BCX0">logging.deu.difr.com</span></span><span class="EOP SCXW46264573 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW46264573 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW46264573 BCX0">downloads.difr.com</span></span><span class="EOP SCXW46264573 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW46264573 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW46264573 BCX0">download.visualstudio.microsoft.com</span></span><span class="EOP SCXW46264573 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 13.3584%;">tcp/443 (HTTPS)</td></tr><tr><td style="width: 25.0298%;">Workload VMs to Frame Platform</td><td style="width: 25.0298%;">Public IP address</td><td style="width: 36.7011%;">- <span class="TextRun SCXW54922117 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW54922117 BCX0">hub.deu.difr.com</span></span><span class="EOP SCXW54922117 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW54922117 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW54922117 BCX0">logging.deu.difr.com</span></span><span class="EOP SCXW54922117 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW54922117 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW54922117 BCX0">api.deu.difr.com</span></span><span class="EOP SCXW54922117 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 13.3584%;">tcp/443 (HTTPS, WSS)</td></tr><tr><td style="width: 25.0298%;">End user to Frame Platform</td><td style="width: 25.0298%;">Public IP address</td><td style="width: 36.7011%;">- <span class="TextRun SCXW222973320 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW222973320 BCX0">deu.difr.com</span></span><span class="EOP SCXW222973320 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW222973320 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW222973320 BCX0">api.deu.difr.com</span></span><span class="EOP SCXW222973320 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW222973320 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SpellingErrorV2Themed SCXW222973320 BCX0">img</span><span class="NormalTextRun SCXW222973320 BCX0">.deu.difr.com</span></span><span class="EOP SCXW222973320 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW222973320 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW222973320 BCX0">assets.deu.difr.com</span></span><span class="EOP SCXW222973320 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW222973320 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun ContextualSpellingAndGrammarErrorV2Themed SCXW222973320 BCX0">login</span><span class="NormalTextRun SCXW222973320 BCX0">.deu.difr.com</span></span><span class="EOP SCXW222973320 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW222973320 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun ContextualSpellingAndGrammarErrorV2Themed SCXW222973320 BCX0">logging</span><span class="NormalTextRun SCXW222973320 BCX0">.deu.difr.com</span></span><span class="EOP SCXW222973320 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW222973320 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW222973320 BCX0">downloads.difr.com</span></span><span class="EOP SCXW222973320 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 13.3584%;">tcp/443 (HTTPS)</td></tr><tr><td style="width: 25.0298%;">End user to Frame Platform</td><td style="width: 25.0298%;">Public IP address</td><td style="width: 36.7011%;">- <span class="TextRun SCXW7164076 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW7164076 BCX0">api.deu.difr.com</span></span><span class="EOP SCXW7164076 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 13.3584%;">t<span class="TextRun SCXW123010797 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SpellingErrorV2Themed SCXW123010797 BCX0">cp</span><span class="NormalTextRun SCXW123010797 BCX0">/443 (HTTPS, WSS)</span></span><span class="EOP SCXW123010797 BCX0" data-ccp-props="{}"> </span></td></tr><tr><td style="width: 25.0298%;">SGA VMs to Frame Platform</td><td style="width: 25.0298%;">Public IP address</td><td style="width: 36.7011%;">- <span class="TextRun SCXW250474372 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW250474372 BCX0">hub.deu.difr.com</span></span><span class="EOP SCXW250474372 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW250474372 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW250474372 BCX0">ntp.ubuntu.com</span></span><span class="EOP SCXW250474372 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW250474372 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW250474372 BCX0">api.snapcraft.io</span></span><span class="EOP SCXW250474372 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 13.3584%;">tcp/443 (HTTPS, WSS)

</td></tr><tr><td style="width: 25.0298%;">End user to SGA VM</td><td style="width: 25.0298%;"><span data-sheets-root="1">Public IP address</span></td><td style="width: 36.7011%;">- <span class="TextRun SCXW5487219 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW5487219 BCX0">SGA VM-specific public IP address</span></span><span class="EOP SCXW5487219 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 13.3584%;">udp/3478 and tcp/3478

</td></tr><tr><td style="width: 25.0298%;">SGA VM to End user</td><td style="width: 25.0298%;">Public IP address</td><td style="width: 36.7011%;">- <span class="TextRun SCXW136003858 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW136003858 BCX0">End user-specific public IP address</span></span><span class="EOP SCXW136003858 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 13.3584%;">udp/49152–65535

</td></tr><tr><td style="width: 25.0298%;">SGA VM to Workload VM</td><td style="width: 25.0298%;">Private IP address</td><td style="width: 36.7011%;">- <span class="TextRun SCXW174795340 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW174795340 BCX0">Dynamic private IP address within VPC/VNET</span></span><span class="EOP SCXW174795340 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 13.3584%;">udp/4503–4509

</td></tr><tr><td style="width: 25.0298%;">Workload VM to SGA VM</td><td style="width: 25.0298%;">Private IP address</td><td style="width: 36.7011%;">- <span class="TextRun SCXW33161892 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW33161892 BCX0">SGA VM-specific private IP address</span></span><span class="EOP SCXW33161892 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 13.3584%;">udp/49152–65535

</td></tr></tbody></table>

</div></div>

# Private Networking (AHV)

Customers using Nutanix AHV infrastructure can create a Frame account using Customer-managed networking, Private Networking so users must access the Frame workload VMs using the private IP addresses of the Frame workload VMs. Since the Frame workload VMs have no public IP addresses, the customer must provide a network path between the end user and the private Frame workload VMs. Customers will also need to ensure these workload VMs and Cloud Connector Appliances (CCAs) can communicate to the Frame control plane on the Internet.

<p class="callout warning"> If a customer requires an outbound proxy server for any communication to the Internet, the outbound proxy server must support both HTTPS and Secure WebSocket (WSS) in order for the Frame Guest Agent (FGA) and CCAs to establish HTTPS and WSS connections to Frame Platform.</p>

<p class="callout info"> To ensure proper network communication to the Frame Platform there are two Backends available depending on which one should be used for the connection for services and VMs please refer to the corresponding networking requirements:  
 [USE ](https://docs.difr.com/link/57#bkmrk-nutanix-ahv---privat-1)(located in the United states- Location AWS Datacenter Virginia)   
 [DEU ](https://docs.difr.com/link/57#bkmrk-deu%3A-nutanix-ahv---p)( located in European Union - Location AWS Datacenter Frankfurt)</p>

## FRP8 Networking

[FRP8](https://docs.difr.com/books/platform-administrators-guide/page/frame-remoting-protocol#bkmrk-frame-remoting-proto-1) is a udp-based protocol for all communication between the end user and the Frame workload VMs.

<figure id="bkmrk-nutanix-ahv---privat">![Nutanix AHV - Private Networking (FRP8)](https://docs.difr.com/uploads/images/gallery/2025-10/ahv-private-frp8.png)

<figcaption>Nutanix AHV - Private Networking (FRP8)</figcaption></figure>The following table describes the required protocols and ports for Frame accounts using Private Networking and FRP8.

<p class="callout warning">**<span dir="ltr" role="presentation"> Dizzion is in the process of migrating from \*.nutanix.com to \*.difr.com domain. For the</span>**  
**<span dir="ltr" role="presentation"> time being, the additional</span> <span dir="ltr" role="presentation">difr.com domain</span><span dir="ltr" role="presentation">s will need to be whitelisted</span> <span dir="ltr" role="presentation">in addition to</span> <span dir="ltr" role="presentation">the</span>**  
**<span dir="ltr" role="presentation"> existing nutanix.com domains. At a later</span> <span dir="ltr" role="presentation">time</span><span dir="ltr" role="presentation">, once Dizzion has confirmed there is no</span>**  
**<span dir="ltr" role="presentation"> dependencies on the nutanix.com domains, we will send out a communication notifying</span>**  
**<span dir="ltr" role="presentation"> customers that all nutanix</span><span dir="ltr" role="presentation">.com domains can be safely removed from your whitelist</span>**  
**<span dir="ltr" role="presentation"> configurations.</span>**</p>

<p class="callout danger">**<span dir="ltr" role="presentation"> IMPORTANT:</span> <span dir="ltr" role="presentation">For IMG Domains, Customers can</span> <span dir="ltr" role="presentation">whitelist</span> <span dir="ltr" role="presentation">new IMG difr</span> <span dir="ltr" role="presentation">domains but</span>**  
**<span dir="ltr" role="presentation"> should</span> <span dir="ltr" role="presentation">NOT</span> <span dir="ltr" role="presentation">change SAML 2 configurations to use new</span> <span dir="ltr" role="presentation">difr.com</span> <span dir="ltr" role="presentation">domains. SAML 2</span>**  
**<span dir="ltr" role="presentation"> configurations</span> <span dir="ltr" role="presentation">should continue to use img.console.nutanix.com and</span>**  
**<span dir="ltr" role="presentation"> img.frame.nutanix.com until further direction from Dizzion</span>**</p>

## USE: Nutanix AHV - Private Networking

<div class="wrap-table" id="bkmrk-source-to-destinatio"><div class="table-container"><table class="wrap-table" style="width: 100%;"><thead><tr><th style="width: 25.0298%;">Source to Destination</th><th style="width: 18.8393%;">Source IP address</th><th style="width: 41.8281%;">Destination FQDN(s)</th><th style="width: 14.4219%;">Protocol/port</th></tr></thead><tbody><tr><td style="width: 25.0298%;">Cloud Connector Appliance (CCA) to Frame Platform</td><td style="width: 18.8393%;">Public IP address</td><td style="width: 41.8281%;">- <span class="TextRun SCXW232859286 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW232859286 BCX0">use.difr.com</span></span><span class="EOP SCXW232859286 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW34445153 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW34445153 BCX0"><span class="EOP SCXW34445153 BCX0" data-ccp-props="{}"><span class="TextRun SCXW146864537 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW146864537 BCX0">api.use.difr.com</span></span><span class="EOP SCXW146864537 BCX0" data-ccp-props="{}"> </span></span></span></span>
- <span class="TextRun SCXW34445153 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW34445153 BCX0"><span class="EOP SCXW34445153 BCX0" data-ccp-props="{}"><span class="TextRun SCXW167308575 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW167308575 BCX0">console.nutanix.com</span></span><span class="EOP SCXW167308575 BCX0" data-ccp-props="{}"> </span></span></span></span>
- <span class="TextRun SCXW34445153 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW34445153 BCX0"><span class="EOP SCXW34445153 BCX0" data-ccp-props="{}"><span class="EOP SCXW167308575 BCX0" data-ccp-props="{}"><span class="TextRun SCXW157691979 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW157691979 BCX0">cpanel-backend.console.nutanix.com</span></span><span class="EOP SCXW157691979 BCX0" data-ccp-props="{}"> </span></span></span></span></span>
- <span class="TextRun SCXW34445153 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW34445153 BCX0"><span class="EOP SCXW34445153 BCX0" data-ccp-props="{}"><span class="EOP SCXW167308575 BCX0" data-ccp-props="{}"><span class="EOP SCXW157691979 BCX0" data-ccp-props="{}"><span class="TextRun SCXW238139804 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW238139804 BCX0">gateway-external-api.console.nutanix.com</span></span><span class="EOP SCXW238139804 BCX0" data-ccp-props="{}"> </span></span></span></span></span></span>

</td><td style="width: 14.4219%;">tcp/443 (HTTPS)</td></tr><tr><td style="width: 25.0298%;">Cloud Connector Appliance (CCA) to Frame Platform</td><td style="width: 18.8393%;">Public IP address</td><td style="width: 41.8281%;">- <span class="TextRun SCXW130291014 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW130291014 BCX0">hub.use.difr.com</span></span><span class="EOP SCXW130291014 BCX0" data-ccp-props="{}"> </span>
- <span class="EOP SCXW130291014 BCX0" data-ccp-props="{}"><span class="TextRun SCXW163256326 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW163256326 BCX0">cch.console.nutanix.com</span></span><span class="EOP SCXW163256326 BCX0" data-ccp-props="{}"> </span></span>

</td><td style="width: 14.4219%;">tcp/443 (HTTPS, WSS)</td></tr><tr><td style="width: 25.0298%;">Prism Central to Frame Platform</td><td style="width: 18.8393%;">Public IP address</td><td style="width: 41.8281%;">- <span class="TextRun SCXW214409971 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW214409971 BCX0">downloads.difr.com</span></span>
- <span class="TextRun SCXW214409971 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW214409971 BCX0"><span class="TextRun SCXW192718304 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW192718304 BCX0">downloads.console.nutanix.com</span></span></span></span>

</td><td style="width: 14.4219%;">tcp/443 (HTTPS)</td></tr><tr><td style="width: 25.0298%;">CCA to Prism Central</td><td style="width: 18.8393%;">Private IP address</td><td style="width: 41.8281%;">- Prism Central IP address<button class="copy-button"><svg class="frame-icon frame-icon--xxs" fill="none" height="10" viewbox="0 0 10 10" width="10" xmlns="http://www.w3.org/2000/svg"><path d="M3.5 7.333q-.48 0-.824-.342a1.12 1.12 0 0 1-.343-.824v-5q0-.482.343-.824Q3.019 0 3.5 0h5.25q.48 0 .824.343.342.342.343.824v5q0 .48-.343.824a1.12 1.12 0 0 1-.824.342zm0-1.166h5.25v-5H3.5zm-2.333 3.5q-.482 0-.824-.343A1.12 1.12 0 0 1 0 8.5V2.333h1.167V8.5h6.416v1.167z" fill="#4DA5F0"></path></svg></button>

</td><td style="width: 14.4219%;">tcp/443 (HTTPS)</td></tr><tr><td style="width: 25.0298%;">CCA to Prism Element</td><td style="width: 18.8393%;">Private IP address</td><td style="width: 41.8281%;">- Prism Element IP address<button class="copy-button"><svg class="frame-icon frame-icon--xxs" fill="none" height="10" viewbox="0 0 10 10" width="10" xmlns="http://www.w3.org/2000/svg"><path d="M3.5 7.333q-.48 0-.824-.342a1.12 1.12 0 0 1-.343-.824v-5q0-.482.343-.824Q3.019 0 3.5 0h5.25q.48 0 .824.343.342.342.343.824v5q0 .48-.343.824a1.12 1.12 0 0 1-.824.342zm0-1.166h5.25v-5H3.5zm-2.333 3.5q-.482 0-.824-.343A1.12 1.12 0 0 1 0 8.5V2.333h1.167V8.5h6.416v1.167z" fill="#4DA5F0"></path></svg></button>

</td><td style="width: 14.4219%;">tcp/443 (HTTPS)</td></tr><tr><td style="width: 25.0298%;">Workload VMs to Frame Platform</td><td style="width: 18.8393%;">Public IP address</td><td style="width: 41.8281%;">- <span class="TextRun SCXW223825245 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW223825245 BCX0">api.use.difr.com</span></span><span class="EOP SCXW223825245 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW223825245 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW223825245 BCX0">hub.deu.difr.com</span></span><span class="EOP SCXW223825245 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW223825245 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW223825245 BCX0">logging.use.difr.com</span></span><span class="EOP SCXW223825245 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW223825245 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW223825245 BCX0">downloads.difr.com</span></span><span class="EOP SCXW223825245 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW223825245 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW223825245 BCX0">download.visualstudio.microsoft.com</span></span><span class="EOP SCXW223825245 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW176761083 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW176761083 BCX0">gateway-external-api-prod.frame.nutanix.com</span></span><span class="EOP SCXW176761083 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW176761083 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW176761083 BCX0">downloads.console.nutanix.com</span></span><span class="EOP SCXW176761083 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW176761083 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW176761083 BCX0">logging.console.nutanix.com</span></span><span class="EOP SCXW176761083 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW176761083 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW176761083 BCX0">cch.console.nutanix.com</span></span><span class="EOP SCXW176761083 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW176761083 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW176761083 BCX0">download.visualstudio.microsoft.com</span></span><span class="EOP SCXW176761083 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 14.4219%;">tcp/443 (HTTPS)</td></tr><tr><td style="width: 25.0298%;">Workload VMs to Frame Platform</td><td style="width: 18.8393%;">Public IP address</td><td style="width: 41.8281%;">- <span class="TextRun SCXW164666324 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW164666324 BCX0">hub.use.difr.com</span></span><span class="EOP SCXW164666324 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW164666324 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW164666324 BCX0">logging.</span><span class="NormalTextRun SCXW164666324 BCX0">use</span><span class="NormalTextRun SCXW164666324 BCX0">.difr.com</span></span><span class="EOP SCXW164666324 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW164666324 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW164666324 BCX0">api.use.difr.com</span></span><span class="EOP SCXW164666324 BCX0" data-ccp-props="{}"> </span>
- <span class="EOP SCXW164666324 BCX0" data-ccp-props="{}"><span class="TextRun SCXW55258143 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW55258143 BCX0">cch.console.nutanix.com</span></span><span class="EOP SCXW55258143 BCX0" data-ccp-props="{}"> </span></span>

</td><td style="width: 14.4219%;">tcp/443 (HTTPS, WSS)</td></tr><tr><td style="width: 25.0298%;">End user to Frame Platform</td><td style="width: 18.8393%;">Public IP address</td><td style="width: 41.8281%;">- <span class="TextRun SCXW117623456 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW117623456 BCX0">use.difr.com</span></span><span class="EOP SCXW117623456 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW117623456 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW117623456 BCX0">api.use.difr.com</span></span><span class="EOP SCXW117623456 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW117623456 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW117623456 BCX0">img.use.difr.com</span></span><span class="EOP SCXW117623456 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW117623456 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW117623456 BCX0">assets.use.difr.com</span></span><span class="EOP SCXW117623456 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW117623456 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW117623456 BCX0">login.use.difr.com</span></span><span class="EOP SCXW117623456 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW117623456 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW117623456 BCX0">logging.use.difr.com</span></span><span class="EOP SCXW117623456 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW117623456 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW117623456 BCX0">downloads.difr.com</span></span><span class="EOP SCXW117623456 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW224324710 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun CommentStart CommentHighlightPipeRest CommentHighlightRest SCXW224324710 BCX0">console.nutanix.com</span></span><span class="EOP CommentHighlightPipeRest SCXW224324710 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW224324710 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW224324710 BCX0">img.frame.nutanix.com</span></span><span class="EOP SCXW224324710 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW224324710 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW224324710 BCX0">img.console.nutanix.com</span></span><span class="EOP SCXW224324710 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW224324710 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW224324710 BCX0">cpanel-backend.console.nutanix.com</span></span><span class="EOP SCXW224324710 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW224324710 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW224324710 BCX0">terminal-prod.frame.nutanix.com</span></span><span class="EOP SCXW224324710 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW224324710 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW224324710 BCX0">logging.console.nutanix.com</span></span><span class="EOP SCXW224324710 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW224324710 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW224324710 BCX0">login.console.nutanix.com (for Frame IdP, if used)</span></span><span class="EOP SCXW224324710 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 14.4219%;">tcp/443 (HTTPS)</td></tr><tr><td style="width: 25.0298%;">End user to Frame Platform</td><td style="width: 18.8393%;">Public IP address</td><td style="width: 41.8281%;"><span class="TextRun SCXW97913288 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW97913288 BCX0">api.use.difr.com</span></span><span class="EOP SCXW97913288 BCX0" data-ccp-props="{}"> </span></td><td style="width: 14.4219%;">tcp/443 (HTTPS, WSS)</td></tr><tr><td style="width: 25.0298%;"><span class="TextRun SCXW163082403 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW163082403 BCX0">End user to Workload VM</span></span><span class="EOP SCXW163082403 BCX0" data-ccp-props="{}"> </span></td><td style="width: 18.8393%;"><span class="TextRun SCXW47945783 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW47945783 BCX0">Private IP address</span></span><span class="EOP SCXW47945783 BCX0" data-ccp-props="{}"> </span></td><td style="width: 41.8281%;"><span class="TextRun SCXW97913288 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW97913288 BCX0"><span class="TextRun SCXW97949505 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW97949505 BCX0">Workload’s dynamic private IP address within VPC/VNET</span></span><span class="EOP SCXW97949505 BCX0" data-ccp-props="{}"> </span></span></span></td><td style="width: 14.4219%;"><span class="TextRun SCXW57243873 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SpellingErrorV2Themed SCXW57243873 BCX0">udp</span><span class="NormalTextRun SCXW57243873 BCX0">/4503-4509, </span><span class="NormalTextRun SpellingErrorV2Themed SCXW57243873 BCX0">tcp</span><span class="NormalTextRun SCXW57243873 BCX0">/4503-4509 (optional)</span></span><span class="EOP SCXW57243873 BCX0" data-ccp-props="{}"> </span></td></tr></tbody></table>

</div></div>## FRP8 Networking

The following table describes the required protocols and ports for Frame accounts using Private Networking and FRP8, , specifically for organizations electing to use Dizzion's EU control plane.

## DEU: Nutanix AHV - Private Networking

<div class="wrap-table" id="bkmrk-s-source-to-destinat">  
<div class="table-container"><table class="wrap-table" style="width: 100%;"><thead><tr><th style="width: 25.0298%;">Source to Destination</th><th style="width: 25.0298%;">Source IP address</th><th style="width: 35.1609%;">Destination FQDN(s)</th><th style="width: 14.8987%;">Protocol/port</th></tr></thead><tbody><tr><td style="width: 25.0298%;">Cloud Connector Appliance (CCA) to Frame Platform</td><td style="width: 25.0298%;">Public IP address</td><td style="width: 35.1609%;">- deu.difr.com
- api.use.difr.com

</td><td style="width: 14.8987%;">tcp/443 (HTTPS)</td></tr><tr><td style="width: 25.0298%;">Cloud Connector Appliance (CCA) to Frame Platform</td><td style="width: 25.0298%;">Public IP address</td><td style="width: 35.1609%;">- hub.deu.difr.com

</td><td style="width: 14.8987%;">tcp/443 (HTTPS, WSS)</td></tr><tr><td style="width: 25.0298%;">Prism Central to Frame Platform</td><td style="width: 25.0298%;">Public IP address</td><td style="width: 35.1609%;">- downloads.difr.com

</td><td style="width: 14.8987%;">tcp/443 (HTTPS)</td></tr><tr><td style="width: 25.0298%;">Workload VMs to Frame Platform</td><td style="width: 25.0298%;">Public IP address</td><td style="width: 35.1609%;">- <span class="TextRun SCXW43044718 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW43044718 BCX0">api.deu.difr.com</span></span><span class="EOP SCXW43044718 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW43044718 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW43044718 BCX0">hub.deu.difr.com</span></span><span class="EOP SCXW43044718 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW43044718 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW43044718 BCX0">logging.deu.difr.com</span></span><span class="EOP SCXW43044718 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW43044718 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW43044718 BCX0">downloads.difr.com</span></span><span class="EOP SCXW43044718 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW43044718 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW43044718 BCX0">download.visualstudio.microsoft.com</span></span><span class="EOP SCXW43044718 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 14.8987%;">tcp/443 (HTTPS)</td></tr><tr><td style="width: 25.0298%;">Workload VMs to Frame Platform</td><td style="width: 25.0298%;">Public IP address</td><td style="width: 35.1609%;">- <span class="TextRun SCXW154499867 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW154499867 BCX0">hub.deu.difr.com</span></span><span class="EOP SCXW154499867 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW154499867 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW154499867 BCX0">logging.deu.difr.com</span></span><span class="EOP SCXW154499867 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW154499867 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW154499867 BCX0">api.deu.difr.com</span></span><span class="EOP SCXW154499867 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 14.8987%;">tcp/443 (HTTPS, WSS)</td></tr><tr><td style="width: 25.0298%;">End user to Frame Platform</td><td style="width: 25.0298%;">Public IP address</td><td style="width: 35.1609%;">- <span class="TextRun SCXW141225384 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW141225384 BCX0">deu.difr.com</span></span><span class="EOP SCXW141225384 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW141225384 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW141225384 BCX0">api.deu.difr.com</span></span><span class="EOP SCXW141225384 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW141225384 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SpellingErrorV2Themed SCXW141225384 BCX0">img</span><span class="NormalTextRun SCXW141225384 BCX0">.deu.difr.com</span></span><span class="EOP SCXW141225384 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW141225384 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW141225384 BCX0">assets.deu.difr.com</span></span><span class="EOP SCXW141225384 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW141225384 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun ContextualSpellingAndGrammarErrorV2Themed SCXW141225384 BCX0">login</span><span class="NormalTextRun SCXW141225384 BCX0">.deu.difr.com</span></span><span class="EOP SCXW141225384 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW141225384 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun ContextualSpellingAndGrammarErrorV2Themed SCXW141225384 BCX0">logging</span><span class="NormalTextRun SCXW141225384 BCX0">.deu.difr.com</span></span><span class="EOP SCXW141225384 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW141225384 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW141225384 BCX0">downloads.difr.com</span></span><span class="EOP SCXW141225384 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 14.8987%;">tcp/443 (HTTPS)</td></tr><tr><td style="width: 25.0298%;">End user to Frame Platform</td><td style="width: 25.0298%;">Public IP address</td><td style="width: 35.1609%;">- <span class="TextRun SCXW61285417 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW61285417 BCX0">api.deu.difr.com</span></span><span class="EOP SCXW61285417 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 14.8987%;">tcp/443 (HTTPS, WSS)</td></tr><tr><td style="width: 25.0298%;"><span class="TextRun SCXW163082403 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW163082403 BCX0">End user to Workload VM</span></span><span class="EOP SCXW163082403 BCX0" data-ccp-props="{}"> </span></td><td style="width: 25.0298%;"><span class="TextRun SCXW47945783 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW47945783 BCX0">Private IP address</span></span><span class="EOP SCXW47945783 BCX0" data-ccp-props="{}"> </span></td><td style="width: 35.1609%;"><span class="TextRun SCXW97913288 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW97913288 BCX0"><span class="TextRun SCXW97949505 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW97949505 BCX0">Workload’s dynamic private IP address within VPC/VNET</span></span><span class="EOP SCXW97949505 BCX0" data-ccp-props="{}"> </span></span></span></td><td style="width: 14.8987%;"><span class="TextRun SCXW57243873 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SpellingErrorV2Themed SCXW57243873 BCX0">udp</span><span class="NormalTextRun SCXW57243873 BCX0">/4503-4509, </span><span class="NormalTextRun SpellingErrorV2Themed SCXW57243873 BCX0">tcp</span><span class="NormalTextRun SCXW57243873 BCX0">/4503-4509 (optional)</span></span><span class="EOP SCXW57243873 BCX0" data-ccp-props="{}"> </span></td></tr></tbody></table>

</div></div>

# Private Networking with SGA (AHV)

Customers using Nutanix AHV infrastructure can create a Frame account using Customer-managed networking, Private Networking with Streaming Gateway Appliance (SGA) so users can access the Frame workload VMs through the public IP address of the SGA VM. The Internet-accessible SGA VM serves as a reverse proxy for Frame sessions between the end users and their Frame workload VMs in the private network. The Frame workload VMs only have private IP addresses. Customers will also need to ensure these workload VMs, Cloud Connector Appliances (CCAs), and Streaming Gateway Appliances (SGAs) can communicate to the Frame control plane on the Internet.

<p class="callout info"> If a customer requires an outbound proxy server for any communication to the Internet, the outbound proxy server must support both HTTPS and Secure WebSocket (WSS) in order for the Frame Guest Agent (FGA), CCAs, and SGAs to establish HTTPS and WSS connections to Frame Platform.</p>

<p class="callout info"> To ensure proper network communication to the Frame Platform there are two Backends available depending on which one should be used for the connection for services and VMs please refer to the corresponding networking requirements:  
 [USE ](https://docs.difr.com/link/58#bkmrk-nutanix-ahv---privat-1)(located in the United states- Location AWS us-east-1Virginia)   
 [DEU ](https://docs.difr.com/link/58#bkmrk-deu%3A-nutanix-ahv---p)( located in European Union - Location AWS eu-central-1 Frankfurt)</p>

## FRP8 Networking (SGA 4)

[FRP8](https://docs.difr.com/books/platform-administrators-guide/page/frame-remoting-protocol#bkmrk-frame-remoting-proto-1) is a udp-based protocol for all communication between the end user and the Frame workload VMs.

<figure id="bkmrk-nutanix-ahv---privat">![Nutanix AHV - Private Networking with SGA (FRP8)](https://docs.difr.com/uploads/images/gallery/2025-10/ahv-private-sga4-frp8.png)

<figcaption>Nutanix AHV - Private Networking with SGA (FRP8)</figcaption></figure>The following table describes the required protocols and ports for Frame accounts using Private Networking with SGA 4 and FRP8.

<p class="callout warning">**<span dir="ltr" role="presentation"> Dizzion is in the process of migrating from \*.nutanix.com to \*.difr.com domain. For the</span>**  
**<span dir="ltr" role="presentation"> time being, the additional</span> <span dir="ltr" role="presentation">difr.com domain</span><span dir="ltr" role="presentation">s will need to be whitelisted</span> <span dir="ltr" role="presentation">in addition to</span> <span dir="ltr" role="presentation">the</span>**  
**<span dir="ltr" role="presentation"> existing nutanix.com domains. At a later</span> <span dir="ltr" role="presentation">time</span><span dir="ltr" role="presentation">, once Dizzion has confirmed there is no</span>**  
**<span dir="ltr" role="presentation"> dependencies on the nutanix.com domains, we will send out a communication notifying</span>**  
**<span dir="ltr" role="presentation"> customers that all nutanix</span><span dir="ltr" role="presentation">.com domains can be safely removed from your whitelist</span>**  
**<span dir="ltr" role="presentation"> configurations.</span>**</p>

<p class="callout danger">**<span dir="ltr" role="presentation"> IMPORTANT: For IMG Domains, Customers can whitelist new IMG difr domains but  
 should NOT change SAML 2 configurations to use new difr.com domains. SAML 2  
 configurations should continue to use img.console.nutanix.com and  
 img.frame.nutanix.com until further direction from Dizzion</span>**</p>

## USE: Nutanix AHV - Private Networking with Streaming Gateway 4

<div class="wrap-table" id="bkmrk-source-to-destinatio">  
<div class="table-container"><table class="wrap-table" style="width: 100.238%;"><thead><tr><th style="width: 25.149%;">Source to Destination</th><th style="width: 24.9106%;">Source IP address</th><th style="width: 38.0226%;">Destination FQDN(s)</th><th style="width: 12.037%;">Protocol/port</th></tr></thead><tbody><tr><td style="width: 25.149%;">Cloud Connector Appliance (CCA) to Frame Platform</td><td style="width: 24.9106%;">Public IP address</td><td style="width: 38.0226%;">- <span class="TextRun SCXW216117800 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW216117800 BCX0">use.difr.com</span></span><span class="EOP SCXW216117800 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW216117800 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW216117800 BCX0">api.use.difr.com</span></span><span class="EOP SCXW216117800 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW258239157 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW258239157 BCX0">console.nutanix.com</span></span><span class="EOP SCXW258239157 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW258239157 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW258239157 BCX0">cpanel-backend.console.nutanix.com</span></span><span class="EOP SCXW258239157 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW258239157 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW258239157 BCX0">gateway-external-api.console.nutanix.com</span></span><span class="EOP SCXW258239157 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 12.037%;">tcp/443 (HTTPS)</td></tr><tr><td style="width: 25.149%;">Cloud Connector Appliance (CCA) to Frame Platform</td><td style="width: 24.9106%;">Public IP address</td><td style="width: 38.0226%;">- <span class="TextRun SCXW10434102 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW10434102 BCX0">hub.use.difr.com</span></span><span class="EOP SCXW10434102 BCX0" data-ccp-props="{}"> </span>
- <span class="EOP SCXW7244100 BCX0" data-ccp-props="{}"><span class="TextRun SCXW124558926 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW124558926 BCX0">cch.console.nutanix.com</span></span><span class="EOP SCXW124558926 BCX0" data-ccp-props="{}"> </span></span>

</td><td style="width: 12.037%;">tcp/443 (HTTPS, WSS)</td></tr><tr><td style="width: 25.149%;">Prism Central to Frame Platform</td><td style="width: 24.9106%;">- Public IP address

</td><td style="width: 38.0226%;">- <span class="TextRun SCXW17617118 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW17617118 BCX0">downloads.difr.com</span></span>
- <span class="EOP SCXW17617118 BCX0" data-ccp-props="{}"><span class="TextRun SCXW222362731 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW222362731 BCX0">downloads.console.nutanix.com</span></span><span class="EOP SCXW222362731 BCX0" data-ccp-props="{}"> </span></span>

</td><td style="width: 12.037%;">tcp/443 (HTTPS)</td></tr><tr><td style="width: 25.149%;">CCA to Prism Central</td><td style="width: 24.9106%;">Private IP address</td><td style="width: 38.0226%;">- <span class="TextRun SCXW202958749 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW202958749 BCX0">Prism Central IP address</span></span><span class="EOP SCXW202958749 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 12.037%;">tcp/443 (HTTPS)</td></tr><tr><td style="width: 25.149%;">Workload VMs to Frame Platform</td><td style="width: 24.9106%;">Public IP address</td><td style="width: 38.0226%;">- <span class="TextRun SCXW266327092 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW266327092 BCX0">api.use.difr.com</span></span><span class="EOP SCXW266327092 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW266327092 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW266327092 BCX0">hub.deu.difr.com</span></span><span class="EOP SCXW266327092 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW266327092 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW266327092 BCX0">logging.use.difr.com</span></span><span class="EOP SCXW266327092 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW266327092 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW266327092 BCX0">downloads.difr.com</span></span><span class="EOP SCXW266327092 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW266327092 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW266327092 BCX0">download.visualstudio.microsoft.com</span></span>
- <span class="TextRun SCXW241958274 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW241958274 BCX0">gateway-external-api-prod.frame.nutanix.com</span></span><span class="EOP SCXW241958274 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW241958274 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW241958274 BCX0">downloads.console.nutanix.com</span></span><span class="EOP SCXW241958274 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW241958274 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW241958274 BCX0">logging.console.nutanix.com</span></span><span class="EOP SCXW241958274 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW241958274 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW241958274 BCX0">cch.console.nutanix.com</span></span><span class="EOP SCXW241958274 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW241958274 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW241958274 BCX0">download.visualstudio.microsoft.com</span></span><span class="EOP SCXW241958274 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 12.037%;">tcp/443 (HTTPS)</td></tr><tr><td style="width: 25.149%;">Workload VMs to Frame Platform</td><td style="width: 24.9106%;">Public IP address</td><td style="width: 38.0226%;">- <span class="NormalTextRun SCXW223290269 BCX0">hub.use.difr.com</span><span class="EOP SCXW223290269 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW223290269 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW223290269 BCX0">logging.</span><span class="NormalTextRun SCXW223290269 BCX0">use</span><span class="NormalTextRun SCXW223290269 BCX0">.difr.com</span></span><span class="EOP SCXW223290269 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW223290269 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW223290269 BCX0">api.use.difr.com</span></span>
- <span class="TextRun SCXW46262566 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW46262566 BCX0">cch.console.nutanix.com</span></span><span class="EOP SCXW46262566 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW46262566 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW46262566 BCX0">logging.console.nutanix.com</span></span><span class="EOP SCXW46262566 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW46262566 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW46262566 BCX0">messaging.console.nutanix.com</span></span><span class="EOP SCXW46262566 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 12.037%;">tcp/443 (HTTPS, WSS)</td></tr><tr><td style="width: 25.149%;">End user to Frame Platform</td><td style="width: 24.9106%;">Public IP address</td><td style="width: 38.0226%;">- <span class="TextRun SCXW67350772 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW67350772 BCX0">use.difr.com</span></span><span class="EOP SCXW67350772 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW67350772 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW67350772 BCX0">api.use.difr.com</span></span><span class="EOP SCXW67350772 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW67350772 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW67350772 BCX0">img.use.difr.com</span></span><span class="EOP SCXW67350772 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW67350772 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW67350772 BCX0">assets.use.difr.com</span></span><span class="EOP SCXW67350772 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW67350772 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW67350772 BCX0">login.use.difr.com</span></span><span class="EOP SCXW67350772 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW67350772 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW67350772 BCX0">logging.use.difr.com</span></span><span class="EOP SCXW67350772 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW67350772 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW67350772 BCX0">downloads.difr.com</span></span><span class="EOP SCXW67350772 BCX0" data-ccp-props="{}">   
    </span>
- <span class="TextRun SCXW214252509 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun CommentStart CommentHighlightPipeRest CommentHighlightRest SCXW214252509 BCX0">console.nutanix.com</span></span><span class="EOP CommentHighlightPipeRest SCXW214252509 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW214252509 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW214252509 BCX0">img.frame.nutanix.com</span></span><span class="EOP SCXW214252509 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW214252509 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW214252509 BCX0">img.console.nutanix.com</span></span><span class="EOP SCXW214252509 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW214252509 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW214252509 BCX0">cpanel-backend.console.nutanix.com</span></span><span class="EOP SCXW214252509 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW214252509 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW214252509 BCX0">terminal-prod.frame.nutanix.com</span></span><span class="EOP SCXW214252509 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW214252509 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW214252509 BCX0">logging.console.nutanix.com</span></span><span class="EOP SCXW214252509 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW214252509 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW214252509 BCX0">login.console.nutanix.com (for Frame IdP, if used)</span></span><span class="EOP SCXW214252509 BCX0" data-ccp-props="{}"> </span>

<span class="EOP SCXW67350772 BCX0" data-ccp-props="{}">  
</span>

</td><td style="width: 12.037%;">tcp/443 (HTTPS)</td></tr><tr><td style="width: 25.149%;">End user to Frame Platform</td><td style="width: 24.9106%;">Public IP address</td><td style="width: 38.0226%;">- <span class="TextRun SCXW245555773 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW245555773 BCX0">api.use.difr.com</span></span>
- <span class="TextRun SCXW6505717 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW6505717 BCX0">messaging.console.nutanix.com</span></span>

</td><td style="width: 12.037%;">tcp/443 (HTTPS, WSS)</td></tr><tr><td style="width: 25.149%;">SGA VMs to Frame Platform</td><td style="width: 24.9106%;">Public IP address</td><td style="width: 38.0226%;">- <span class="TextRun SCXW91193733 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW91193733 BCX0">hub.use.difr.com</span></span><span class="EOP SCXW91193733 BCX0" data-ccp-props="{}"> </span>
- <span class="EOP SCXW162571585 BCX0" data-ccp-props="{}"><span class="TextRun SCXW109222416 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun ContextualSpellingAndGrammarErrorV2Themed SCXW109222416 BCX0">cch.console.nutanix.com  
    </span></span></span>
- ntp.ubuntu.com
- api.snapcraft.io (Canonical Snapcraft)

</td><td style="width: 12.037%;"><span class="TextRun SCXW54803286 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SpellingErrorV2Themed SCXW54803286 BCX0">tcp</span><span class="NormalTextRun SCXW54803286 BCX0">/443 (HTTPS, WSS)</span></span><span class="EOP SCXW54803286 BCX0" data-ccp-props="{}"> </span></td></tr><tr><td style="width: 25.149%;">End user to SGA VM</td><td style="width: 24.9106%;">Public IP address</td><td style="width: 38.0226%;">- <span class="TextRun SCXW54369262 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW54369262 BCX0">SGA VM-specific public IP address</span></span><span class="EOP SCXW54369262 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 12.037%;">udp/3478 and tcp/3478</td></tr><tr><td style="width: 25.149%;">SGA VM to End user</td><td style="width: 24.9106%;">Public IP address</td><td style="width: 38.0226%;">- <span class="TextRun SCXW258968256 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW258968256 BCX0">End user-specific public IP address</span></span><span class="EOP SCXW258968256 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 12.037%;">udp/49152–65535</td></tr><tr><td style="width: 25.149%;">SGA VM to Workload VM</td><td style="width: 24.9106%;">Private IP address</td><td style="width: 38.0226%;">- <span class="TextRun SCXW41693948 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW41693948 BCX0">Dynamic private IP address within VPC/VNET</span></span><span class="EOP SCXW41693948 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 12.037%;">udp/4503–4509</td></tr><tr><td style="width: 25.149%;">Workload VM to SGA VM</td><td style="width: 24.9106%;">Private IP address</td><td style="width: 38.0226%;">- <span class="TextRun SCXW100560211 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW100560211 BCX0">SGA VM-specific private IP address</span></span><span class="EOP SCXW100560211 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 12.037%;">udp/49152–65535</td></tr></tbody></table>

</div></div>## FRP8 Networking (SGA 4)

The following table lists the required protocols and ports for Frame accounts using Private Networking with SGA 4 and FRP8, specifically for organizations electing to use Dizzion's EU control plane.

## DEU: Nutanix AHV - Private Networking with Streaming Gateway 4

<div class="wrap-table" id="bkmrk-source-to-destinatio-1">  
<div class="table-container"><table class="wrap-table" style="width: 100%;"><thead><tr><th style="width: 25.0298%;">Source to Destination</th><th style="width: 25.0298%;">Source IP address</th><th style="width: 38.379%;">Destination FQDN(s)</th><th style="width: 11.6806%;">Protocol/port</th></tr></thead><tbody><tr><td style="width: 25.0298%;">Cloud Connector Appliance (CCA) to Frame Platform</td><td style="width: 25.0298%;">Public IP address</td><td style="width: 38.379%;">- <span class="TextRun SCXW36933737 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW36933737 BCX0">deu.difr.com</span></span><span class="EOP SCXW36933737 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW36933737 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW36933737 BCX0">api.deu.difr.com</span></span><span class="EOP SCXW36933737 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 11.6806%;">tcp/443 (HTTPS)</td></tr><tr><td style="width: 25.0298%;">Cloud Connector Appliance (CCA) to Frame Platform</td><td style="width: 25.0298%;">Public IP address</td><td style="width: 38.379%;">- <span class="TextRun SCXW215582223 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW215582223 BCX0">hub.deu.difr.com</span></span><span class="EOP SCXW215582223 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 11.6806%;">tcp/443 (HTTPS, WSS)</td></tr><tr><td style="width: 25.0298%;">Prism Central to Frame Platform (not required starting with PC 2023.4)</td><td style="width: 25.0298%;">Public IP address</td><td style="width: 38.379%;">- <span class="TextRun SCXW249417835 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW249417835 BCX0">downloads.difr.com</span></span><span class="EOP SCXW249417835 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 11.6806%;">tcp/443 (HTTPS)</td></tr><tr><td style="width: 25.0298%;">Workload VMs to Frame Platform</td><td style="width: 25.0298%;">Public IP address</td><td style="width: 38.379%;">- <span class="NormalTextRun SCXW234767590 BCX0">api.deu.difr.com</span><span class="EOP SCXW234767590 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW234767590 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW234767590 BCX0">hub.deu.difr.com</span></span><span class="EOP SCXW234767590 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW234767590 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW234767590 BCX0">logging.deu.difr.com</span></span><span class="EOP SCXW234767590 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW234767590 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW234767590 BCX0">downloads.difr.com</span></span><span class="EOP SCXW234767590 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW234767590 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW234767590 BCX0">download.visualstudio.microsoft.com</span></span><span class="EOP SCXW234767590 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 11.6806%;">tcp/443 (HTTPS)</td></tr><tr><td style="width: 25.0298%;">Workload VMs to Frame Platform</td><td style="width: 25.0298%;">Public IP address</td><td style="width: 38.379%;">- <span class="TextRun SCXW190588478 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW190588478 BCX0">hub.deu.difr.com</span></span><span class="EOP SCXW190588478 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW190588478 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW190588478 BCX0">logging.deu.difr.com</span></span><span class="EOP SCXW190588478 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW190588478 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW190588478 BCX0">api.deu.difr.com</span></span><span class="EOP SCXW190588478 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 11.6806%;">tcp/443 (HTTPS, WSS)</td></tr><tr><td style="width: 25.0298%;">End user to Frame Platform</td><td style="width: 25.0298%;">Public IP address</td><td style="width: 38.379%;">- <span class="TextRun SCXW191977199 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW191977199 BCX0">deu.difr.com</span></span><span class="EOP SCXW191977199 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW191977199 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW191977199 BCX0">api.deu.difr.com</span></span><span class="EOP SCXW191977199 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW191977199 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SpellingErrorV2Themed SCXW191977199 BCX0">img</span><span class="NormalTextRun SCXW191977199 BCX0">.deu.difr.com</span></span><span class="EOP SCXW191977199 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW191977199 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW191977199 BCX0">assets.deu.difr.com</span></span><span class="EOP SCXW191977199 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW191977199 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun ContextualSpellingAndGrammarErrorV2Themed SCXW191977199 BCX0">login</span><span class="NormalTextRun SCXW191977199 BCX0">.deu.difr.com</span></span><span class="EOP SCXW191977199 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW191977199 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun ContextualSpellingAndGrammarErrorV2Themed SCXW191977199 BCX0">logging</span><span class="NormalTextRun SCXW191977199 BCX0">.deu.difr.com</span></span><span class="EOP SCXW191977199 BCX0" data-ccp-props="{}"> </span>
- <span class="TextRun SCXW191977199 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW191977199 BCX0">downloads.difr.com</span></span><span class="EOP SCXW191977199 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 11.6806%;">tcp/443 (HTTPS)</td></tr><tr><td style="width: 25.0298%;">End user to Frame Platform</td><td style="width: 25.0298%;">Public IP address</td><td style="width: 38.379%;">- <span class="TextRun SCXW129982464 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW129982464 BCX0">api.deu.difr.com</span></span><span class="EOP SCXW129982464 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 11.6806%;">tcp/443 (HTTPS, WSS)</td></tr><tr><td style="width: 25.0298%;">SGA VMs to Frame Platform</td><td style="width: 25.0298%;">Public IP address</td><td style="width: 38.379%;">- <span class="TextRun SCXW149155611 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW149155611 BCX0">hub.use.difr.com</span></span><span class="EOP SCXW149155611 BCX0" data-ccp-props="{}"> </span>
- ntp.ubuntu.com
- api.snapcraft.io (Canonical Snapcraft)

</td><td style="width: 11.6806%;"><span class="TextRun SCXW54803286 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SpellingErrorV2Themed SCXW54803286 BCX0">tcp</span><span class="NormalTextRun SCXW54803286 BCX0">/443 (HTTPS, WSS)</span></span><span class="EOP SCXW54803286 BCX0" data-ccp-props="{}"> </span></td></tr><tr><td style="width: 25.0298%;">End user to SGA VM</td><td style="width: 25.0298%;">Public IP address</td><td style="width: 38.379%;">- <span class="TextRun SCXW37585109 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW37585109 BCX0">SGA VM-specific public IP address</span></span><span class="EOP SCXW37585109 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 11.6806%;">udp/3478 and tcp/3478</td></tr><tr><td style="width: 25.0298%;">SGA VM to End user</td><td style="width: 25.0298%;">Public IP address</td><td style="width: 38.379%;">- <span class="TextRun SCXW97511625 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW97511625 BCX0">End user-specific public IP address</span></span><span class="EOP SCXW97511625 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 11.6806%;">udp/49152–65535</td></tr><tr><td style="width: 25.0298%;">SGA VM to Workload VM</td><td style="width: 25.0298%;">Private IP address</td><td style="width: 38.379%;">- <span class="TextRun SCXW66617184 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW66617184 BCX0">Dynamic private IP address within VPC/VNET</span></span><span class="EOP SCXW66617184 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 11.6806%;">udp/4503–4509</td></tr><tr><td style="width: 25.0298%;">Workload VM to SGA VM</td><td style="width: 25.0298%;">Private IP address</td><td style="width: 38.379%;">- <span class="TextRun SCXW105043142 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW105043142 BCX0">SGA VM-specific private IP address</span></span><span class="EOP SCXW105043142 BCX0" data-ccp-props="{}"> </span>

</td><td style="width: 11.6806%;">udp/49152–65535</td></tr></tbody></table>

</div></div>

# VPN Configurations

Some customers need to integrate Frame into a network where VPNs are used. This guide discusses the use of VPNs for common Frame solution architectures.

## End User Access to Frame Workloads

Customers who have end users on the Internet who need to access Frame workloads in a private network can use a point-to-site VPN between the end user and the workloads or Streaming Gateway Appliance (SGA). If the customer requires a point-to-site VPN, the client VPN software can be configured for split-tunnel or full-tunnel, provided that the client's endpoint can still resolve Frame-related public fully-qualified domain names (FQDNs).

## Frame Workload Access to Private Networks

Customers who need their users to access an existing private network (usually on-premises) from Frame workloads in public cloud need a secure way to connect to the private network. Once this connection is established, users running on Frame can securely access resources from the network such as file servers or license servers. Customers can chose from a number of different options, based on the desired end user experience, security, cost, and performance.

### Software VPN Client

Installing a software VPN client within the Frame workload VMs will allow you to quickly publish a VPN client to all of your users. Simply install the VPN client software in the Sandbox and test the connection before publishing to your production instances.

When setting up your VPN client, you must use a **split-tunnel configuration** to ensure:

1. Frame workload VMs can continue communicate to the Frame Control Plane
2. The Frame Remoting Protocol traffic between end user and their Frame workload VM can continue to flow. If the Frame Remoting Protocol traffic is unable to route back from the workload VM to the end user's endpoint after the software VPN client starts up its VPN connection, the end user will be abruptly disconnected from their Frame session.

<p class="callout info"> It is also possible to automatically prompt users to login via VPN when they start a session on Frame by using \[pre-session scripts\](/books/platform-administrators-guide/page/scripting).</p>

Frame works with Cisco AnyConnect, GlobalProtect, OpenVPN, and SonicWall services. Any other VPN clients that support split-tunnel configurations should work as well.

### Site-to-Site VPN

For customers who deploy Frame workloads in public cloud and require end users to access network services in their private, on-premises network, customers can design and implement a site-to-site Virtual Private Network (VPN) using their public cloud provider's VPN Gateway solution. Use of a site-to-site VPN eliminates the need for end users to authenticate to a VPN Gateway while in a Frame session.

To learn more about VPN gateways, review the documentation below for each of the supported public cloud infrastructures:

- [AWS](https://docs.aws.amazon.com/vpn/latest/s2svpn/SetUpVPNConnections.html)
- [Azure](https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpngateways)
- [GCP](https://cloud.google.com/network-connectivity/docs/vpn/how-to)
- [IBM](https://cloud.ibm.com/docs/vpc?topic=vpc-using-vpn)

### Other Private Inter-Networking Solutions

Customers can use other private inter-networking solutions:

- VPC/VNET peering, if the Frame workloads in one VPC/VNET need to communicate with resources in a different VPC/VNET on the same public cloud infrastructure
- AWS Direct Connect, Azure ExpressRoute, or Google Cloud Interconnect
- SD-WAN

The design, deployment, and management of these inter-networking solutions are the responsibility of the customer.