Access to GoodCloud behind firewall

GoodCloud, AstroWarp and AstroRelay
1

I have to place a Slate, which I would like to connect to the EU GoodCloud into an internal network behind a firewall.
What is the configuration for the outgoing traffic for the firewall (IP address range and ports), so that the device can access the EU GoodCloud servers and the configuration for the incoming traffic, so that I can access the device via GoodCloud (SSH and Web interface)?

Thanks and best regards,
Joerg

2

Here you can find all needed details for GC:

3

Nothing need to do, as long as you can access the Internet.

4

I did not find the information I am looking for in your docs.
That is exactly the problem: the device cannot access the Internet, because the access is restricted by the firewall, it does allow outgoing connections to particular IPs only. Therefore I have to configure the firewall to give the Slate access to the Internet, see my original question.
You have answered this question in this forum already with respect to the US servers: What are the GoodCloud IP address ranges?, but I need to connect to the European servers. And for me it is also important which incoming traffic from the cloud to the device has to be allowed in the firewall.

5

None. The connection will be initiated by the router all the time. Should be RPC, if I remember right.
Hostname of the EU cloud is cloud-eu.goodcloud.xyz

6

cloud-eu.goodcloud.xyz does not resolve.
The connection to the cloud is definetely initiated by the router, but what if I initiate a remote connection from the cloud web interface either to the web interface of the router or via the ssh button on the web interface of the cloud to the router?

7

If you have a outgoing firewall, just allow the domain goodcloud.xyz. Does this work?

8

The problem is that I do not have access to the firewall, I have to tell the admin (an external company) of the firewall which firewall rules to configure.
So trial and error is not really an option …

9

Totally resolves to 18.203.182.177

Goodcloud uses WebRTC, so only reverse connections.

11

You are right, it resolves, but I cannot ping it, contrary to gslb-us.goodcloud.xyz.

12

Should be gslb-eu.goodcloud.xyz for EU then.
But the IP is the same, so whitelisting 18.203.182.177 should be fine.

13

Neither gslb-eu.goodcloud.xyz, nor 18.203.182.177 answer to pings.

14

They don’t need to. You are not required to answer to pings.