Below is a collection of the outbound network requirements for Apple devices. Whilst Apple own the 17.0.0.0/8 range, Akamai's CDN is also used for many of Apple's services, and so these are included below.
The last entry is only required if a datajar.mobi customer.
NOTE: The below may change at any time and as such the below may not be complete. Also, the below traffic needs to be direct. This means not proxied, nor inspected or SSL decrypted.
|
Service |
Destination | Port |
|
Apple |
*.apple.com |
80 (tcp) |
|
Apple |
*.apple.com |
443 (tcp) |
|
Apple |
*.apple.com |
5223 (tcp) |
|
Apple |
*.cdn-apple.com |
80 (tcp) |
|
Apple |
*.cdn-apple.com |
443 (tcp) |
|
Apple |
*.apple-cloudkit.com |
80 (tcp) |
|
Apple |
*.apple-cloudkit.com |
443 (tcp) |
|
Apple |
*.mzstatic.com |
80 (tcp) |
|
Apple |
*.mzstatic.com |
443 (tcp) |
|
CDN |
*.2o7.net |
80 (tcp) |
|
CDN |
*.2o7.net |
443 (tcp) |
|
CDN |
*.akadns.net |
80 (tcp) |
|
CDN |
*.akadns.net |
443 (tcp) |
|
CDN |
*.akamai.net |
80 (tcp) |
|
CDN |
*.akamai.net |
443 (tcp) |
|
CDN |
*.akamaiedge.net |
80 (tcp) |
|
CDN |
*.akamaiedge.net |
443 (tcp) |
|
CDN |
*.akamaitechnologies.com |
80 (tcp) |
|
CDN |
*.akamaitechnologies.com |
443 (tcp) |
|
CDN |
*.edgekey.net |
80 (tcp) |
|
CDN |
*.edgekey.net |
443 (tcp) |
|
CDN |
*.edgesuite.net |
80 (tcp) |
|
CDN |
*.edgesuite.net |
443 (tcp) |
|
CDN |
*.footprint.net |
80 (tcp) |
|
CDN |
*.footprint.net |
443 (tcp) |
|
CDN |
*.amazonaws.com |
80 (tcp) |
|
CDN |
*.amazonaws.com |
443 (tcp) |
|
CDN |
*.symcb.com |
80 (tcp) |
|
CDN |
*.symcb.com |
443 (tcp) |
|
CDN |
*.symcd.com |
80 (tcp) |
|
CDN |
*.symcd.com |
443 (tcp) |
|
Certificate Validation |
crl.entrust.net |
80 (tcp) |
|
Certificate Validation |
crl3.digicert.com |
80 (tcp) |
|
Certificate Validation |
crl4.digicert.com |
80 (tcp) |
|
Certificate Validation |
ocsp.digicert.com |
80 (tcp) |
|
Certificate Validation |
ocsp.entrust.net |
80 (tcp) |
|
Certificate Validation |
ocsp.verisign.net |
80 (tcp) |
|
Time Services |
time.apple.com |
123 (udp) |
|
dataJAR |
*.datajar.mobi |
443 (tcp) |
If you have any questions or queries regarding the above article, please contact support@datajar.co.uk