Skip to content

Important

For the production environment, a separate X-Road Security Server must be deployed on separate infrastructure (physical or virtual), with its own IP address and DNS name, different from those of the test environment.

Please do not use the test environment's Security Server, or its IP address or DNS name, for production. The Security Servers of the test and production environments, and their corresponding network identifiers, must be kept separate.

Alongside the transition to the production environment, the test infrastructure must be maintained and continue to operate for testing purposes.

ADEL IPs for whitelisting

In order for ADEL to be able to centrally monitor the ecosystem, provide statistics and support to members, we ask that the security server ports 5500/tcp and 5577/tcp be open to the security servers for monitoring the various ADEL environments listed in the table below :

Type AM - production ISAADemo - test
Central server cs1.adel.gov.am (91.221.228.94)
cs2.adel.gov.am (91.221.228.93)
cs3.adel.gov.am (91.221.228.92)		 cs1.demo.x-road.isaa.cloud
Management Services Security Server mss.adel.gov.am (91.221.228.93) mss.demo.x-road.isaa.cloud (63.184.54.254)
Monitoring security server monitoring.adel.gov.am metrics-ss.demo.x-road.isaa.cloud

When managing port access, we strongly recommend using a firewall and allowing (whitelisting) only the addresses of ADEL and data exchange partners.

Ports must be open:

  • ports for outgoing connections (from the security server to the external network, OUT):

    • towards the central server: TCP 4001, 80, 443
    • towards the management services security server: TCP 5500, 5577

  • ports for incoming connections (from the external network to the security server, IN):

    • security servers (clients) of your own data exchange partners: TCP 5500, 5577
    • ADEL monitoring security server: TCP 5500, 5577

You can find information about the description of the ports used here.

Note: Please make sure that ports 8080 and 8443 of the security server are not accessible from the outside network.

Network Diagram