---
schema_version: "1"
id: bf0f22309c60247f59b2d26109667ef011dd0b1f069b5601b64563e93e18888b
title: Adding Ports, IPs, and Hostnames for Runtime Manager Agent
collection: mulesoft
version: current
locale: en-us
portal_url: https://docs.salesforce.com/mulesoft/current/en-us/hybrid-standalone/configure-ports-ips.md
canonical_url: https://docs.mulesoft.com/hybrid-standalone/configure-ports-ips
source_site: docs.mulesoft.com
content_type: documentation
content_hash: e387567464a7523fc21d23ed288979f4844518b4c8660a5b71c8536e2371fdad
description: MuleSoft Documentation Site
latest: true
---
---
product: Hybrid Standalone Runtimes
---

# Adding Ports, IPs, and Hostnames for Runtime Manager Agent

> For the full documentation index, see: https://docs.mulesoft.com/llms.txt

Configure network access for the Runtime Manager agent to establish secure communication between
your hybrid standalone instances and Anypoint Platform services.

## Overview

To enable Runtime Manager agent connectivity in your customer-hosted Mule runtime environment, you
must configure your network infrastructure to allow communication with Anypoint Platform APIs and
services. This configuration involves adding specific hostnames, ports, and IP addresses to your
network allowlists and firewall rules.

These sections provide the specific network configuration details required for each communication
protocol and regional deployment.

All connectivity requirements are for outbound connections from your network to Anypoint Platform.
No inbound connectivity to your network or servers is required.

Runtime Manager agent establishes persistent WebSocket connections that remain active for ongoing
communication with Anypoint Platform services.

This page lists US Cloud, EU Cloud, MuleSoft Government Cloud, Japan Cloud, India Cloud, Australia
Cloud, and United Kingdom Cloud endpoints. For Canada Cloud, allowlist the Platform URL, analytics
ingest, and Runtime Manager hosts in
[Control Plane Hostnames and Allowlists](https://docs.mulesoft.com/control-planes/control-plane-hostnames-allowlists).

## Mutual TLS Authentication Endpoints

The Runtime Manager agent uses mutual TLS (mTLS) to authenticate directly with these endpoints:

- runtime-manager.anypoint.mulesoft.com

- runtime-manager.eu1.anypoint.mulesoft.com

- runtime-manager.gov.anypoint.mulesoft.com

- runtime-manager.jp1.platform.mulesoft.com

- runtime-manager.in1.platform.mulesoft.com

- runtime-manager.au1.platform.mulesoft.com

- runtime-manager.gb1.platform.mulesoft.com

- data-authenticator.anypoint.mulesoft.com

- data-authenticator.gov.anypoint.mulesoft.com

- us1.ingest.mulesoft.com

- eu1.ingest.mulesoft.com

The `*.ingest.mulesoft.com` endpoints handle OpenTelemetry metrics ingestion.

> [!IMPORTANT] Configure your firewall or proxy to allow SSL passthrough for these endpoints. Don’t
> enable deep packet inspection (DPI) or SSL decryption. For `*.ingest.mulesoft.com`, allow outbound
> TCP on port 8443 and port 443.

## WebSocket Endpoints

These endpoints use WebSocket connections for real-time communication between the agent and Runtime
Manager. Ensure your firewall supports WebSocket protocol upgrades and persistent connections for
these endpoints.

- runtime-manager.anypoint.mulesoft.com

- runtime-manager.eu1.anypoint.mulesoft.com

- runtime-manager.gov.anypoint.mulesoft.com

- runtime-manager.jp1.platform.mulesoft.com

- runtime-manager.in1.platform.mulesoft.com

- runtime-manager.au1.platform.mulesoft.com

- runtime-manager.gb1.platform.mulesoft.com

## Required Ports and Hostnames

Configure your firewall to allow outbound connections to these ports and hostnames based on your
Anypoint Platform region.

<table><colgroup><col> <col> <col></colgroup><thead><tr><th>Region</th><th>Name</th><th>Port</th></tr></thead><tbody><tr><td><div><div><p><strong>US</strong></p></div></div></td><td><div><div><p>anypoint.mulesoft.com</p></div></div></td><td><div><div><p>443</p></div></div></td></tr><tr><td><div><div><p><strong>US</strong></p></div></div></td><td><div><div><p>runtime-manager.anypoint.mulesoft.com</p></div></div></td><td><div><div><p>443</p></div></div></td></tr><tr><td><div><div><p><strong>US</strong></p></div></div></td><td><div><div><p>analytics-ingest.anypoint.mulesoft.com</p></div></div></td><td><div><div><p>443</p></div></div></td></tr><tr><td><div><div><p><strong>US</strong></p></div></div></td><td><div><div><p>data-authenticator.anypoint.mulesoft.com</p></div></div></td><td><div><div><p>443</p></div></div></td></tr><tr><td><div><div><p><strong>US</strong></p></div></div></td><td><div><div><p>exchange-files.anypoint.mulesoft.com</p></div></div></td><td><div><div><p>443</p></div></div></td></tr><tr><td><div><div><p><strong>US</strong></p></div></div></td><td><div><div><p>exchange2-asset-manager-kprod.s3.amazonaws.com</p></div></div></td><td><div><div><p>443</p></div></div></td></tr><tr><td><div><div><p><strong>US</strong></p></div></div></td><td><div><div><p>us1.ingest.mulesoft.com</p></div></div></td><td><div><div><p>8443</p></div></div></td></tr><tr><td><div><div><p><strong>US-GOV</strong></p></div></div></td><td><div><div><p>runtime-manager.gov.anypoint.mulesoft.com</p></div></div></td><td><div><div><p>443</p></div></div></td></tr><tr><td><div><div><p><strong>US-GOV</strong></p></div></div></td><td><div><div><p>data-authenticator.gov.anypoint.mulesoft.com</p></div></div></td><td><div><div><p>443</p></div></div></td></tr><tr><td><div><div><p><strong>US-GOV</strong></p></div></div></td><td><div><div><p>gov.anypoint.mulesoft.com</p></div></div></td><td><div><div><p>443</p></div></div></td></tr><tr><td><div><div><p><strong>US-GOV</strong></p></div></div></td><td><div><div><p>exchange-files.gov.anypoint.mulesoft.com</p></div></div></td><td><div><div><p>443</p></div></div></td></tr><tr><td><div><div><p><strong>US-GOV</strong></p></div></div></td><td><div><div><p>exchange2-asset-manager-kgprod.s3.us-gov-west-1.amazonaws.com</p></div></div></td><td><div><div><p>443</p></div></div></td></tr><tr><td><div><div><p><strong>EU</strong></p></div></div></td><td><div><div><p>eu1.anypoint.mulesoft.com</p></div></div></td><td><div><div><p>443</p></div></div></td></tr><tr><td><div><div><p><strong>EU</strong></p></div></div></td><td><div><div><p>runtime-manager.eu1.anypoint.mulesoft.com</p></div></div></td><td><div><div><p>443</p></div></div></td></tr><tr><td><div><div><p><strong>EU</strong></p></div></div></td><td><div><div><p>analytics-ingest.eu1.anypoint.mulesoft.com</p></div></div></td><td><div><div><p>443</p></div></div></td></tr><tr><td><div><div><p><strong>EU</strong></p></div></div></td><td><div><div><p>data-authenticator.eu1.anypoint.mulesoft.com</p></div></div></td><td><div><div><p>443</p></div></div></td></tr><tr><td><div><div><p><strong>EU</strong></p></div></div></td><td><div><div><p>exchange2-asset-manager-kprod-eu.s3.eu-central-1.amazonaws.com</p></div></div></td><td><div><div><p>443</p></div></div></td></tr><tr><td><div><div><p><strong>EU</strong></p></div></div></td><td><div><div><p>eu1.ingest.mulesoft.com</p></div></div></td><td><div><div><p>8443</p></div></div></td></tr><tr><td><div><div><p><strong>JP</strong></p></div></div></td><td><div><div><p>runtime-manager.jp1.platform.mulesoft.com</p></div></div></td><td><div><div><p>8443</p></div></div></td></tr><tr><td><div><div><p><strong>IN</strong></p></div></div></td><td><div><div><p>runtime-manager.in1.platform.mulesoft.com</p></div></div></td><td><div><div><p>8443</p></div></div></td></tr><tr><td><div><div><p><strong>AU</strong></p></div></div></td><td><div><div><p>runtime-manager.au1.platform.mulesoft.com</p></div></div></td><td><div><div><p>8443</p></div></div></td></tr><tr><td><div><div><p><strong>GB</strong></p></div></div></td><td><div><div><p>runtime-manager.gb1.platform.mulesoft.com</p></div></div></td><td><div><div><p>8443</p></div></div></td></tr></tbody></table>

## Static IP Addresses

For network environments that require IP-based firewall rules, use these static IP addresses to
allow Runtime Manager connectivity.

- Allowlist these static IPs in the `US` region to access the `runtime-manager` hosts:

  <table><colgroup><col> <col> <col></colgroup><thead><tr><th>Region</th><th>Name</th><th>IP Address</th></tr></thead><tbody><tr><td><div><div><p><strong>US</strong></p></div></div></td><td><div><div><p>runtime-manager.anypoint.mulesoft.com</p></div></div></td><td><div><div><p>18.214.68.14</p></div></div></td></tr><tr><td><div><div><p><strong>US</strong></p></div></div></td><td><div><div><p>runtime-manager.anypoint.mulesoft.com</p></div></div></td><td><div><div><p>35.174.151.175</p></div></div></td></tr><tr><td><div><div><p><strong>US</strong></p></div></div></td><td><div><div><p>runtime-manager.anypoint.mulesoft.com</p></div></div></td><td><div><div><p>18.213.137.40 (Starting Feb 2024)</p></div></div></td></tr><tr><td><div><div><p><strong>US</strong></p></div></div></td><td><div><div><p>runtime-manager.anypoint.mulesoft.com</p></div></div></td><td><div><div><p>34.232.255.44 (Starting Feb 2024)</p></div></div></td></tr><tr><td><div><div><p><strong>US</strong></p></div></div></td><td><div><div><p>runtime-manager.anypoint.mulesoft.com</p></div></div></td><td><div><div><p>44.209.29.79 (Starting Feb 2024)</p></div></div></td></tr></tbody></table>

- Allowlist these static IPs in the `EU` region to access the `runtime-manager` hosts:

  <table><colgroup><col> <col> <col></colgroup><thead><tr><th>Region</th><th>Name</th><th>IP Address</th></tr></thead><tbody><tr><td><div><div><p><strong>EU</strong></p></div></div></td><td><div><div><p>runtime-manager.eu1.anypoint.mulesoft.com</p></div></div></td><td><div><div><p>18.185.141.77</p></div></div></td></tr><tr><td><div><div><p><strong>EU</strong></p></div></div></td><td><div><div><p>runtime-manager.eu1.anypoint.mulesoft.com</p></div></div></td><td><div><div><p>3.123.216.217</p></div></div></td></tr><tr><td><div><div><p><strong>EU</strong></p></div></div></td><td><div><div><p>runtime-manager.eu1.anypoint.mulesoft.com</p></div></div></td><td><div><div><p>3.127.253.183 (Starting Feb 2024)</p></div></div></td></tr></tbody></table>

> [!NOTE] Static IP addresses aren’t available for the Runtime Manager hosts in Japan Cloud, India
> Cloud, Australia Cloud, and United Kingdom Cloud. For these clouds, configure firewall rules using
> the hostnames in [Layer 7 Firewall Configuration](#layer-7-firewall-configuration).

## Dynamic IP Addresses

Configure hostname-based firewall rules for Anypoint Platform services that use dynamically assigned
IP addresses.

### Layer 7 Firewall Configuration

Some Anypoint Platform services use IP addresses that are dynamically assigned by cloud
infrastructure. For these services, configure Layer 7 firewall rules based on fully qualified domain
names (FQDNs) rather than static IP addresses.

Configure your Layer 7 firewall rules to include these hostnames:

<table><colgroup><col> <col></colgroup><thead><tr><th>Region</th><th>Hostname</th></tr></thead><tbody><tr><td><div><div><p><strong>US</strong></p></div></div></td><td><div><div><p>anypoint.mulesoft.com</p></div></div></td></tr><tr><td><div><div><p><strong>US</strong></p></div></div></td><td><div><div><p>analytics-ingest.anypoint.mulesoft.com</p></div></div></td></tr><tr><td><div><div><p><strong>US</strong></p></div></div></td><td><div><div><p>data-authenticator.anypoint.mulesoft.com</p></div></div></td></tr><tr><td><div><div><p><strong>US</strong></p></div></div></td><td><div><div><p>us1.ingest.mulesoft.com</p></div></div></td></tr><tr><td><div><div><p><strong>US-GOV</strong></p></div></div></td><td><div><div><p>runtime-manager.gov.anypoint.mulesoft.com</p></div></div></td></tr><tr><td><div><div><p><strong>US-GOV</strong></p></div></div></td><td><div><div><p>data-authenticator.gov.anypoint.mulesoft.com</p></div></div></td></tr><tr><td><div><div><p><strong>US-GOV</strong></p></div></div></td><td><div><div><p>gov.anypoint.mulesoft.com</p></div></div></td></tr><tr><td><div><div><p><strong>EU</strong></p></div></div></td><td><div><div><p>eu1.anypoint.mulesoft.com</p></div></div></td></tr><tr><td><div><div><p><strong>EU</strong></p></div></div></td><td><div><div><p>analytics-ingest.eu1.anypoint.mulesoft.com</p></div></div></td></tr><tr><td><div><div><p><strong>EU</strong></p></div></div></td><td><div><div><p>data-authenticator.eu1.anypoint.mulesoft.com</p></div></div></td></tr><tr><td><div><div><p><strong>EU</strong></p></div></div></td><td><div><div><p>eu1.ingest.mulesoft.com</p></div></div></td></tr><tr><td><div><div><p><strong>JP</strong></p></div></div></td><td><div><div><p>runtime-manager.jp1.platform.mulesoft.com</p></div></div></td></tr><tr><td><div><div><p><strong>IN</strong></p></div></div></td><td><div><div><p>runtime-manager.in1.platform.mulesoft.com</p></div></div></td></tr><tr><td><div><div><p><strong>AU</strong></p></div></div></td><td><div><div><p>runtime-manager.au1.platform.mulesoft.com</p></div></div></td></tr><tr><td><div><div><p><strong>GB</strong></p></div></div></td><td><div><div><p>runtime-manager.gb1.platform.mulesoft.com</p></div></div></td></tr></tbody></table>

### Agent-Specific Allowlist

Configure these URLs for Runtime Manager agent connectivity based on your agent version.

**Agent Version Requirements**

- **Mule 4.x**: Runtime Manager agent 2.2.0 or later

- **OpenTelemetry metrics ingestion**: Runtime Manager agent 2.7.0 or later

<table><colgroup><col> <col></colgroup><thead><tr><th>URL</th><th>Description</th></tr></thead><tbody><tr><td><div><div><p>runtime-manager.anypoint.mulesoft.com</p></div></div></td><td><div><div><p>ARM management capabilities (<strong>public-cert agents</strong>)</p></div></div></td></tr><tr><td><div><div><p>data-authenticator.anypoint.mulesoft.com</p></div></div></td><td><div><div><p>Metrics ingestion for arm-monitoring stack (<strong>public-cert agents</strong>)</p></div></div></td></tr><tr><td><div><div><p>us1.ingest.mulesoft.com (port 8443)</p></div></div></td><td><div><div><p>OpenTelemetry metrics ingestion (agent 2.7.0+)</p></div></div></td></tr><tr><td><div><div><p>eu1.ingest.mulesoft.com (port 8443)</p></div></div></td><td><div><div><p>OpenTelemetry metrics ingestion (agent 2.7.0+)</p></div></div></td></tr></tbody></table>

## See Also

- [Control Plane Hostnames and Allowlists](https://docs.mulesoft.com/control-planes/control-plane-hostnames-allowlists)

- [Setting up Hybrid Standalone Instances](https://docs.mulesoft.com/hybrid-standalone/setting-hybrid-standalone)

- [Creating Servers](https://docs.mulesoft.com/hybrid-standalone/creating-servers)

- [Managing Hybrid Standalone Instances](https://docs.mulesoft.com/hybrid-standalone/managing-hybrid-standalone)

- [Deploying Mule Apps to Hybrid Standalone Instances](https://docs.mulesoft.com/hybrid-standalone/deploying-apps-hybrid-standalone)

- [Monitoring Hybrid Standalone Instances](https://docs.mulesoft.com/hybrid-standalone/monitoring-hybrid-standalone)