What are the required firewall rules for outbound xwiki server update traffic?

We’re hosting XWiki 10.1 within an internet restricted environment. We want to open firewall ports to allow xwiki to update itself and install extensions, all of which are blocked right now. Our network team wants a list of hosts/IPs and port numbers that are expected so that the server itself can reach out to the internet. I’ve tried to search for these values in the installation materials and on this forum and couldn’t find them, so sorry if this is a duplicate request.

I guess it would be interesting to list this in a section similar to https://www.xwiki.org/xwiki/bin/view/Documentation/AdminGuide/Installation/#HHardwareandSoftwarerequirements where we would list the default hosts/ports required to be open for XWiki Standard without any custom configuration.

Before we do that, let’s first make the list:

  • Extension Manager:
    • https://nexus.xwiki.org/nexus/content/groups/public
    • https://store.xwiki.com/xwiki/rest/
    • https://extensions.xwiki.org/xwiki/rest/
  • Active Installs: http://extensions.xwiki.org/activeinstalls
  • Video in XWiki Standard home page: https://www.youtube.com/embed/9QTWrZ7OfzI
    • Note that it can (and should) be removed, it’s just sample content. We also need to remove it by default.

ofc, if you install extensions, they may require more hosts/ports. For example the jira macro extension will require that your jira instance host/port be open to work.

Let’s see if other xwiki developers chime in with more hosts/ports that I have forgotten.


Thank you, Vincent!