All of the following network communications are necessary for the gateway to operate. These communications must therefore be enabled in the customer's network / firewall.
Azure IoT Hub Provisioning Service
The Azure IoT Hub Provisioning Service is contacted by the gateway to get the address of the Azure IoT Hub it should send data to. This is done whenever the Gateway detects that internet connection has been established.
The Azure IoT Hub Provisioning Service used by HsM is hosted in the Azure location West Europe, the DNS name of this service is hsmdps.azure-devices-provisioning.net . Note that the IP address behind this DNS can be changed by Microsoft at any time. Microsoft provides up-to-date information about used IP addresses with Azure service tags.
Communication with the Azure IoT Hub Provisioning Service uses HTTPS, TCP port 443, outgoing.
Azure IoT Hub
Communication between the gateway and HsM is relayed via an Azure IoT Hub hosted in Azure location West europe. The DNS name of this IoT hub is hagiothubprod.azure-devices.net . Note that the IP address behind this DNS entry can be changed by Microsoft at any time. Microsoft provides up-to-date information about used IP addresses with Azure service tags.
Communication with the Azure IoT Hub Provisioning Service uses HTTPS, TCP port 443, outgoing.
Communication with Network Time Protocol services
The gateway synchronizes its local clock with time servers using the Network Time Protocol (NTP). For this the OpenWRT operating system uses www.ntppool.org which basically assigns random NTP servers to each gateway.
Communication with Network Time Servers uses NTP, UDP port 123, outgoing.
Firmware update
For updating the gateway firmware the gateway checks for new firmware versions regularly and will automatically download new firmware versions once they become available. Firmware are hosted on a server with IP 80.120.70.40
Communication with the firmware update server uses HTTPS, TCP port 443, outgoing
DNS and DHCP
For proper operation the Gateway will also communicate with the configured DNS service and (if used) DHCP service. Communication with DNS uses UDP port 53, Communication with DHCP server uses UDP 67 (outgoing) and 68 (incoming).
