Overview
School networks are often protected with multiple layers of networking security to prevent access to unauthorized content and protect internal resources. These protections typically include network firewalls and content filtering devices.
To ensure your students and instructors can access their CloudApps sessions, ensure that your network security platforms are configured to permit outbound traffic to the following addresses and domains.
Content Filtering
If your network includes content filtering devices (sometimes called reverse proxies), it may be necessary to exclude itopia CloudApps from filter rules. This is commonly done by adding a set of DNS domains to an allow list (previously called whitelist) to ensure that traffic destined for those domains is not blocked or inspected.
Domain Allow List
Updated May 12, 2022
To ensure that on-network devices can access all itopia CloudApps functionality, ensure that the following domains are allowed:
# Admin and User Portals
labs.itopia.com
labs-admin.itopia.com
labs-api.itopia.com
labs-auth.itopia.com
iap-istio-us-central1.labs.itopia.app
iap-istio-us-east1.labs.itopia.app
iap-istio-us-west1.labs.itopia.app
# Cluster endpoints
broker-us-central1.labs.itopia.app
broker-us-east1.labs.itopia.app
broker-us-west1.labs.itopia.app
# Speed test feature
speedtest-us-central1.labs.itopia.app
speedtest-us-east1.labs.itopia.app
speedtest-us-west1.labs.itopia.app
Packet Inspection / SSL Decryption
If your content filtering device performs packet inspection and/or SSL decryption, these technologies will significantly impact the performance of CloudApps desktop sessions. It is highly recommended to disable this functionality for the domains listed above. itopia CloudApps can provide desktop-level monitoring and filtering solutions to ensure that students do not access unauthorized material from within their CloudApps sessions; contact your itopia Account Executive to discuss available options.
Network Firewall
Updated May 2, 2023
itopia CloudApps requires only standard, outbound HTTP(S) connectivity to the domains listed above.
If you are performing strict firewall filtering, ensure that the following IP addresses can be accessed on ports 80 and 443 with TCP and UDP for the itopia STUN/TURN traffic.
199.36.158.100
34.135.61.130
34.139.192.93
34.139.192.193
35.233.184.98
35.244.13.127
34.105.58.65
Inbound Connectivity
If your CloudApps sessions need to connect to your internal network (such as for accessing licensing servers for certain products), you will need to permit inbound traffic from the IP addresses below. For information on the specific ports and target IP addresses, please refer to the licensing documentation for your application or contact the itopia Helpdesk for more information.
35.247.99.83
34.105.58.65
34.136.237.224
34.72.27.102
34.73.162.139
34.73.72.8
Network Bandwidth and Performance
itopia CloudApps is designed to dynamically adapt to clients' network performance and deliver the best available experience. However, itopia recommends the following minimum network connectivity specifications to ensure a stable and performant session for users.
|
Metric |
Recommendation |
Explanation |
|
Download speed / bandwidth |
Graphics-accelerated sessions (e.g., Adobe Creative Cloud or Blender): 4 Mbps or higher
Non-accelerated sessions (e.g., Microsoft Office or Computer Science): 2 Mbps or higher |
Download speed refers to the rate that data can be received by the client. Higher bandwidth allows CloudApps to stream the desktop with less compression and higher framerate, resulting in a smoother, clearer image. |
|
Upload speed / bandwidth |
1 Mbps or higher |
Upload speed refers to the rate that data can be transmitted from the client. Typically, upstream data is restricted to keyboard and mouse input and therefore does not require much bandwidth. |
|
Latency (round-trip): |
Recommended: 60ms or less Maximum: 200ms or less |
Latency refers to the delay between data being sent from CloudApps and received by the client, or vice-versa. Lower latency means that user input (keystrokes or mouse movement) are represented more quickly in the CloudApps session. |
|
Packet Loss |
0.25% or less |
Packet loss refers to the number of data packets that must be re-transmitted between CloudApps and the client and reflects the stability of the client's connection to the CloudApps environment. Higher rates of packet loss mean more data has to be re-sent, resulting in intermittent delays or garbled displays. |
Users can view their network status from within their CloudApps session using the "flyout" menu on the righthand side of their browser window. This menu monitors the metrics listed above and is useful for troubleshooting poor connectivity issues. Users are automatically notified if CloudApps detects persisting network performance issues.
Comments
0 comments
Please sign in to leave a comment.