Connectivity Requirements
External domains and communication ports required by XCP-ng hosts and Xen Orchestra, for firewall configuration.
External domains and communication ports required by XCP-ng hosts and Xen Orchestra, for firewall configuration.
Default firewall configuration of the Xen Orchestra Appliance and how to check or change opened ports with UFW.
List of servers your XOA must reach over HTTPS (TCP 443), plus the URLs required to update Citrix hosts.
Use UFW rules on XOA to restrict web interface access (ports 80 and 443) to specific IP addresses.