Public Networking (Public Cloud)

Customers using public cloud infrastructure can create a Frame account using Frame-managed networking, Public Networking so users on the Internet can directly access the Frame workload VMs using the public IP addresses of the Frame workload VMs. For egress to the Internet, these workload VMs communicate directly to the Internet for publicly-accessible resources. 

 If users must access network resources on-premises or in a private network, a private network connection (e.g., VPN, direct connection, SD-WAN, VPC/VNET peering) with the appropriate routing must be implemented. 

   To ensure proper network communication to the Frame Platform there are two Backends available depending on which one    should be used for the connection for services and VMs please refer to the corresponding networking requirements: 

 USE  (located in the United states- Location AWS us-east-1Virginia)  

 DEU  ( located in European Union - Location AWS eu-central-1 Frankfurt) 

 FRP8 Networking 

 FRP8 is a udp-based protocol for all communication between the end user and the Frame workload VMs. 

 

 

   Dizzion is in the process of migrating from *.nutanix.com to *.difr.com domain. For the   time being, the additional   difr.com domain s will need to be whitelisted   in addition to   the   existing nutanix.com domains. At a later   time , once Dizzion has confirmed there is no   dependencies on the nutanix.com domains, we will send out a communication notifying   customers that all nutanix .com domains can be safely removed from your whitelist   configurations. 

  IMPORTANT:   For IMG Domains, Customers can   whitelist   new IMG difr   domains but   should   NOT   change SAML 2 configurations to use new   difr.com   domains. SAML 2   configurations   should continue to use img.console.nutanix.com and   img.frame.nutanix.com until further direction from Dizzion. 

 USE: Public IaaS - Public Networking (FRP8) 

 The following table lists the required protocols and ports for Frame accounts using Public Networking and FRP8. 

 

 

 

 

 Source to Destination 

   

   

 

 Source IP address 

 Destination FQDN(s) 

 Protocol/port 

 

 

 

 

 Workload VMs to Frame Platform 

 Public IP address 

 

 

 api.use.difr.com   

 hub.deu.difr.com   

 logging.use.difr.com   

 downloads.difr.com   

 download.visualstudio.microsoft.com 

 gateway-external-api-prod.frame.nutanix.com   

 downloads.console.nutanix.com   

 logging.console.nutanix.com   

 cch.console.nutanix.com   

 

 

 tcp/443 (HTTPS) 

 

 

 Workload VMs to Frame Platform 

 Public IP address 

 

 

 hub.use.difr.com   

 logging. use .difr.com   

 api.use.difr.com   

 cch.console.nutanix.com   

 logging.console.nutanix.com   

 messaging.console.nutanix.com   

 

 

 tcp/443 (HTTPS, WSS) 

 

 

 Workload VMs to Frame Platform 

 Public IP address 

 

 

 stun.use.difr.com 

 

   

 udp/3478 

 

 

 End user to Frame Platform 

 Public IP address 

 

 

 use.difr.com   

 api.use.difr.com   

 img.use.difr.com   

 assets.use.difr.com   

 login.use.difr.com   

 logging.use.difr.com 

 downloads.difr.com 

 console.nutanix.com 

 img.frame.nutanix.com 

 img.console.nutanix.com 

 cpanel-backend.console.nutanix.com 

 terminal-prod.frame.nutanix.com 

 logging.console.nutanix.com   

 login.console.nutanix.com (for Frame IdP, if used)   

 

 

 tcp/443 (HTTPS) 

 

 

 End user to Frame Platform 

 Public IP address 

 

 

 api.use.difr.com   

 messaging.console.nutanix.com   

 

 

 tcp/443 (HTTPS, WSS) 

 

 

 End user to Workload VM 

 Public IP address 

 

 

 Workload’s dynamic private IP address within VPC/VNET   

 

 

 udp/4503-4509, tcp/4503-4509 (optional) 

 

 

 

 DEU: Public IaaS - Public Networking (FRP8 

 The following table lists the required protocols and ports for Frame accounts using Public Networking and FRP8, specifically for organizations electing to use Dizzion's EU control plane. 

 DEU: Public Networking (Public Cloud) 

 

 

 

 Source to Destination 

 Source IP address 

 Destination FQDN(s) 

 Protocol/port 

 

 

 

 

 Workload VMs to Frame Platform 

 Public IP address 

 

 

 api.deu.difr.com   

 hub.deu.difr.com   

 logging.deu.difr.com   

 downloads.difr.com   

 download.visualstudio.microsoft.com   

 

 

 tcp/443 (HTTPS) 

 

 

 Workload VMs to Frame Platform 

 Public IP address 

 

   

 

 hub.deu.difr.com   

 logging.deu.difr.com   

 api.deu.difr.com   

 

   

 

 tcp/443 (HTTPS, WSS) 

 

 

 Workload VMs to Frame Platform 

 Public IP address 

 

 

 stun.deu.difr.com 

 

   

 udp/3478 

 

 

 End user to Frame Platform 

 Public IP address 

 

 

 deu.difr.com   

 api.deu.difr.com   

 img .deu.difr.com   

 assets.deu.difr.com   

 login .deu.difr.com   

 logging .deu.difr.com   

 downloads.difr.com   

 

 

 tcp/443 (HTTPS) 

 

 

 End user to Frame Platform 

 Public IP address 

 

 

 api.deu.difr.com 

 

   

 tcp/443 (HTTPS, WSS) 

 

 

 End user to Workload VM 

 Public IP address 

 

 

 Workload’s dynamic private IP address within VPC/VNET   

 

 

 udp/4503-4509, tcp/4503-4509 (optional) 

 

 

 

 

 FRP7 Networking End of Life 

 Warning FRP7 reached end-of-life (EOL) effective June 30, 2024. Refer to the EOL Announcement of December 18, 2023 for further details.