Add the IP addresses and port numbers that are used by CloudMonitor to the whitelist of the firewall - CloudMonitor

If a firewall is installed on your host, you must add the IP addresses and port numbers that are used by CloudMonitor to the whitelist of the firewall. This way, the CloudMonitor agent installed on your host can communicate with the CloudMonitor server.

Procedure

Log on to the host where the CloudMonitor agent resides as a root user.
Important
You can manage the CloudMonitor agent only by using an administrator account. For Linux operating systems, use the root user account. For Windows operating systems, use the Administrator account. If you use an administrator account, certain risks may occur. For example, system stability or data security issues may occur. Proceed with caution.
Run the following command to obtain the IP address that is used by CloudMonitor to receive heartbeat data:
```
nslookup cms-cloudmonitor.aliyun.com
```
If the nslookup command is not installed, you can run the following ping command:
```
ping cms-cloudmonitor.aliyun.com
```
Run the following command to obtain the IP address that is used by CloudMonitor to receive monitoring data:
- VPC
```
nslookup metrichub-<regionid>.aliyun.com
```
  Note
  You must add CIDR block 100.100.0.0/16 and port numbers 0 to 65535 to the whitelist of the firewall. The specified IP addresses are used to obtain instance-related information such as regionId.
- Internet
```
nslookup metrichub-cms-<regionid>.aliyuncs.com
```
Note
If your host is deployed in a VPC, we recommend that you preferentially report monitoring data to the VPC endpoint of CloudMonitor (metrichub-<regionid>.aliyun.com). You can also report monitoring data to the public endpoint of CloudMonitor (metrichub-cms-<regionid>.aliyuncs.com). In the public endpoint, the regionid parameter can be set only to cn-hangzhou, cn-shanghai, cn-beijing, or cn-shenzhen.
Add the IP addresses and port numbers that are used by CloudMonitor to receive heartbeat data and monitoring data to the whitelist of the firewall.
CloudMonitor uses the following port numbers:
- 80 and 443: used to receive the monitoring data reported by the CloudMonitor agent from the host.
- 8080 and 3128: used to monitor the heartbeats of the CloudMonitor agent.
Note
If your host is not provided by Alibaba Cloud, you can use port 443 to report data over the Internet and monitor the heartbeats of the CloudMonitor agent.