Help Center/ Workspace/ FAQs/ FAQs for Administrators/ Networking/ How Do I Allow Traffic to Pass Through Specified Service IP Addresses and Ports When There Is Access Control on Desktop Access?
Updated on 2025-09-12 GMT+08:00

How Do I Allow Traffic to Pass Through Specified Service IP Addresses and Ports When There Is Access Control on Desktop Access?

Table 1 Service IP addresses and ports of Workspace

Access Scenario

IP Address

Port

Protocol

Description

Internet access

Access IP address

443

TCP

Internet access address

Public IP address of the desktop access gateway

8443

TCP

Port for HDP data communication based on TCP

8502–8509

UDP

Port for HDP data communication based on UDP

8601

TCP

TCP port for WebSocket-based data communication between the browser and access gateway

IP address of the network acceleration node accessed by desktops

20000–22000

UDP

IP address of the network acceleration node accessed by cloud desktops

6447, 443

TCP

IP address for client software download

443

TCP

Address for downloading the Workspace client software package

Log reporting

443

TCP

Log reporting

IP address for reporting client metrics

8903

TCP

Reporting metrics such as the network latency, jitter, and packet loss rate during a desktop's network access

Direct Connect access

Access IP address

443

TCP

Direct Connect access address

Private IP address of the desktop access gateway

8443

TCP

Port for HDP data communication based on TCP

8502-8509

UDP

Port for HDP data communication based on UDP

8601

TCP

TCP port for WebSocket-based data communication between the browser and access gateway

  • The IP addresses in the preceding table may change. For access control such as firewalls and security groups, you are advised to allow traffic to pass through ports in the preceding table.
  • If you need to allow traffic to pass through IP addresses in the preceding table, submit a service ticket for technical support.