All Products
Search

This Product

    Microservices Engine:Network requirements for Microservices Governance outside Alibaba Cloud VPC

    Document Center

    Microservices Engine:Network requirements for Microservices Governance outside Alibaba Cloud VPC

    Last Updated:Mar 11, 2026

    Applications deployed in on-premises data centers or multi-cloud environments must reach specific Microservices Engine (MSE) endpoints for Microservices Governance to function. This topic lists every IP address and port that your network must allow, organized by region.

    Note

    Applications deployed inside an Alibaba Cloud virtual private cloud (VPC) connect to MSE automatically. No additional network configuration is required.

    Traffic categories and required ports

    MSE Microservices Governance requires outbound connectivity from your application to several cloud-side services. The following table summarizes each traffic category, the ports it uses, and whether it is mandatory.

    CategoryPortsDirectionRequired
    Obtain basic information8080OutboundYes
    Obtain governance rule configurations8080, 8848, 9848OutboundYes
    Obtain agent metadata configurations80OutboundYes
    Report metric data and events80OutboundYes
    Report diagnostic information80OutboundYes
    Report ARMS monitoring information80OutboundOnly if you use Application Real-Time Monitoring Service (ARMS)
    Report ARMS information80OutboundOnly if you use ARMS

    Your application pulls configuration and metadata from the first three categories at startup, and pushes metrics, events, and diagnostics to the remaining categories at runtime. If any mandatory endpoint is unreachable, the application may fail to start or governance features may not work.

    Before you begin

    Make sure that you have:

    • Identified the region where your MSE instance is deployed

    • Access to modify firewall rules or security group policies in your deployment environment

    • (Optional) ARMS enabled, if you plan to use ARMS monitoring

    Endpoints by region

    Find your MSE instance region below and allow outbound traffic to all listed IP addresses and ports.

    China (Hangzhou)

    Mandatory endpoints

    IP addressPortUsage
    100.103.35.2488080Obtain basic information
    100.103.35.2498080Obtain basic information
    100.100.45.1758080, 8848, 9848Obtain governance rule configurations
    100.100.45.1748080, 8848, 9848Obtain governance rule configurations
    100.100.45.1908080, 8848, 9848Obtain governance rule configurations
    100.100.17.918080, 8848, 9848Obtain governance rule configurations
    100.100.100.20080Obtain agent metadata configurations
    100.103.42.23380Report metric data and events
    100.100.32.11880Report diagnostic information
    100.103.89.11380Report diagnostic information
    100.100.142.480Report diagnostic information
    100.103.89.11480Report diagnostic information
    100.103.89.11280Report diagnostic information
    100.100.142.180Report diagnostic information
    100.103.89.11580Report diagnostic information
    100.100.142.780Report diagnostic information
    100.100.142.680Report diagnostic information
    100.100.142.580Report diagnostic information

    ARMS endpoints (optional)

    Skip these if you do not use ARMS.

    IP addressPortUsage
    100.103.107.8280Report ARMS monitoring information
    100.103.13.16980Report ARMS monitoring information
    100.103.107.8380Report ARMS monitoring information
    100.103.13.15380Report ARMS monitoring information
    100.103.83.6980Report ARMS monitoring information
    121.43.177.20980Report ARMS information

    China (Shanghai)

    Mandatory endpoints

    IP addressPortUsage
    100.103.16.428080Obtain basic information
    100.103.16.418080Obtain basic information
    100.100.27.58080, 8848, 9848Obtain governance rule configurations
    100.100.109.638080, 8848, 9848Obtain governance rule configurations
    100.100.27.2238080, 8848, 9848Obtain governance rule configurations
    100.100.27.2248080, 8848, 9848Obtain governance rule configurations
    100.100.100.20080Obtain agent metadata configurations
    100.103.22.12080Report metric data and events
    100.100.140.380Report diagnostic information
    100.100.119.19980Report diagnostic information
    100.100.119.19680Report diagnostic information
    100.100.119.19780Report diagnostic information
    100.100.119.19380Report diagnostic information
    100.100.140.580Report diagnostic information
    100.100.140.980Report diagnostic information
    100.100.140.480Report diagnostic information
    100.100.119.19880Report diagnostic information

    ARMS endpoints (optional)

    Skip these if you do not use ARMS.

    IP addressPortUsage
    100.103.84.8680Report ARMS monitoring information
    100.103.105.7380Report ARMS monitoring information
    100.103.104.18580Report ARMS monitoring information
    100.103.9.15980Report ARMS monitoring information
    100.103.103.5980Report ARMS monitoring information
    100.103.105.7480Report ARMS monitoring information
    100.103.103.6080Report ARMS monitoring information
    139.224.101.6980Report ARMS information

    China (Beijing)

    Mandatory endpoints

    IP addressPortUsage
    100.103.96.1468080Obtain basic information
    100.103.96.1478080Obtain basic information
    100.100.105.578080, 8848, 9848Obtain governance rule configurations
    100.100.105.568080, 8848, 9848Obtain governance rule configurations
    100.100.18.228080, 8848, 9848Obtain governance rule configurations
    100.100.18.508080, 8848, 9848Obtain governance rule configurations
    100.100.33.98080, 8848, 9848Obtain governance rule configurations
    100.100.33.1338080, 8848, 9848Obtain governance rule configurations
    100.100.100.20080Obtain agent metadata configurations
    100.103.100.7280Report metric data and events
    100.100.120.5780Report diagnostic information
    100.100.120.5680Report diagnostic information
    100.100.120.5880Report diagnostic information
    100.100.120.5580Report diagnostic information
    100.100.120.1280Report diagnostic information
    100.100.120.1380Report diagnostic information

    ARMS endpoints (optional)

    Skip these if you do not use ARMS.

    IP addressPortUsage
    100.103.84.4680Report ARMS monitoring information
    100.103.102.21680Report ARMS monitoring information
    100.103.102.21780Report ARMS monitoring information
    100.103.102.21880Report ARMS monitoring information
    100.103.92.24480Report ARMS monitoring information
    47.94.108.1180Report ARMS information

    China (Shenzhen)

    Mandatory endpoints

    IP addressPortUsage
    100.103.102.1498080Obtain basic information
    100.103.102.1488080Obtain basic information
    100.100.0.1108080, 8848, 9848Obtain governance rule configurations
    100.100.21.2058080, 8848, 9848Obtain governance rule configurations
    100.100.0.1098080, 8848, 9848Obtain governance rule configurations
    100.100.21.2048080, 8848, 9848Obtain governance rule configurations
    100.100.100.20080Obtain agent metadata configurations
    100.103.92.21180Report metric data and events
    100.100.144.6780Report diagnostic information
    100.100.0.9080Report diagnostic information
    100.115.10.14880Report diagnostic information
    100.115.10.15880Report diagnostic information
    100.100.161.19580Report diagnostic information
    100.100.161.19480Report diagnostic information

    ARMS endpoints (optional)

    Skip these if you do not use ARMS.

    IP addressPortUsage
    100.103.31.8680Report ARMS monitoring information
    100.103.94.18580Report ARMS monitoring information
    100.103.102.21380Report ARMS monitoring information
    47.106.155.6780Report ARMS information

    China (Zhangjiakou)

    Mandatory endpoints

    IP addressPortUsage
    100.100.2.868080Obtain basic information
    100.100.2.858080Obtain basic information
    100.100.99.868080, 8848, 9848Obtain governance rule configurations
    100.100.100.20080Obtain agent metadata configurations
    100.100.0.880Report metric data and events
    100.100.171.280Report diagnostic information
    100.100.99.7480Report diagnostic information
    100.100.166.7380Report diagnostic information
    100.100.171.380Report diagnostic information
    100.100.99.280Report diagnostic information
    100.100.166.7280Report diagnostic information
    100.100.99.17480Report diagnostic information
    100.100.166.8280Report diagnostic information
    100.100.166.7980Report diagnostic information
    100.100.171.180Report diagnostic information
    100.100.99.13680Report diagnostic information
    100.100.99.17380Report diagnostic information
    100.100.99.13580Report diagnostic information
    100.100.166.8180Report diagnostic information
    100.100.166.8080Report diagnostic information
    100.100.171.480Report diagnostic information

    ARMS endpoints (optional)

    Skip these if you do not use ARMS.

    IP addressPortUsage
    100.100.1.23480Report ARMS monitoring information
    100.100.3.17280Report ARMS monitoring information
    100.100.2.10780Report ARMS monitoring information
    100.100.1.3080Report ARMS monitoring information
    39.98.65.4480Report ARMS information

    China East 1 Finance

    Mandatory endpoints

    IP addressPortUsage
    100.103.102.2548080Obtain basic information
    100.103.102.2538080Obtain basic information
    100.100.17.58080, 8848, 9848Obtain governance rule configurations
    10.157.201.658080, 8848, 9848Obtain governance rule configurations
    100.100.100.20080Obtain agent metadata configurations
    100.103.42.23380Report metric data and events
    100.100.164.5080Report diagnostic information
    100.100.164.4980Report diagnostic information

    ARMS endpoints (optional)

    Skip these if you do not use ARMS.

    IP addressPortUsage
    100.103.211.18380Report ARMS monitoring information
    116.62.99.21980Report ARMS information

    China East 2 Finance

    Mandatory endpoints

    IP addressPortUsage
    100.100.0.1148080Obtain basic information
    100.100.0.1178080Obtain basic information
    100.100.27.1238080, 8848, 9848Obtain governance rule configurations
    100.100.36.418080, 8848, 9848Obtain governance rule configurations
    100.100.100.20080Obtain agent metadata configurations
    100.100.0.22180Report metric data and events
    100.100.24.1780Report diagnostic information

    ARMS endpoints (optional)

    Skip these if you do not use ARMS.

    IP addressPortUsage
    100.100.1.13580Report ARMS monitoring information
    139.224.146.2780Report ARMS information

    China South 1 Finance

    Mandatory endpoints

    IP addressPortUsage
    100.103.102.268080Obtain basic information
    100.103.102.258080Obtain basic information
    100.100.0.868080, 8848, 9848Obtain governance rule configurations
    100.100.0.798080, 8848, 9848Obtain governance rule configurations
    100.100.100.20080Obtain agent metadata configurations
    100.103.83.9180Report metric data and events
    100.100.0.180Report diagnostic information

    ARMS endpoints (optional)

    Skip these if you do not use ARMS.

    IP addressPortUsage
    100.103.0.20680Report ARMS monitoring information
    119.23.169.3580Report ARMS information

    Alibaba Gov Cloud

    Mandatory endpoints

    IP addressPortUsage
    100.100.1.1898080Obtain basic information
    100.100.1.1888080Obtain basic information
    100.100.49.168080, 8848, 9848Obtain governance rule configurations
    100.100.131.368080, 8848, 9848Obtain governance rule configurations
    100.100.100.20080Obtain agent metadata configurations
    100.100.1.1880Report metric data and events
    100.100.1.13180Report diagnostic information
    100.100.49.13380Report diagnostic information
    100.100.49.980Report diagnostic information

    ARMS endpoints (optional)

    Skip these if you do not use ARMS.

    IP addressPortUsage
    100.100.0.20780Report ARMS monitoring information
    39.107.189.1680Report ARMS information

    Verify connectivity

    After you configure your firewall rules, verify that your application environment can reach the required endpoints. Use telnet or curl to test connectivity to each IP address and port.

    To verify connectivity to a basic information endpoint in the China (Hangzhou) region:

    # Test TCP connectivity on port 8080
telnet 100.103.35.248 8080

# Or use curl with a timeout
curl -v --connect-timeout 5 http://100.103.35.248:8080

    Run similar tests for at least one IP address in each usage category for your region. A successful TCP connection confirms that the firewall rules are correctly configured.

    Troubleshooting

    SymptomPossible causeAction
    Application fails to start with a timeout errorBasic information or governance rule endpoints are unreachableVerify that ports 8080, 8848, and 9848 are open for the corresponding IP addresses in your region
    Application starts but governance features do not workMetric, event, or diagnostic endpoints are blockedVerify that port 80 is open for the metric and diagnostic IP addresses in your region
    ARMS monitoring data is missingARMS endpoints are unreachableIf you use ARMS, verify that port 80 is open for the ARMS IP addresses in your region
    Intermittent connectivity failuresNot all IP addresses for a category are allowedMake sure that all IP addresses listed for each category are in your allowlist, not just the first one