Network requirements#
The tables below list the host names and ports Connect uses to reach Jump's cloud and accept connections. In Hosts to allow, the Required column states whether a firewall must allow each entry, or whether the entry is recommended, optional, or needed only in some configurations. Jump's cloud establishes each connection; traffic then flows directly between the computers or through a relay. For details on connection paths, see Choose a connectivity option.
In short: if your firewall allows outbound traffic, no changes are usually required. Use this reference if your firewall blocks outbound traffic by default or connections are slow.
Hosts to allow#
| Host | Port | Protocol | Required |
|---|---|---|---|
neuron.jumpdesktop.com |
443 | TCP | Yes |
api.jumpdesktop.com |
443 | TCP | Yes |
app.jumpdesktop.com |
443 | TCP | Recommended: sign-in, Connect Code redemption, and the Teams dashboard |
mirror.jumpdesktop.com |
443 | TCP | Recommended: updates on Windows and macOS. Required on Linux Alpha for installation and updates from the package repositories |
jumpdesktop.com |
443 | TCP | Linux Alpha: the install script and the package repositories for installation and updates |
turn.jumpdesktop.com |
3478 (UDP), 443 (TCP) | UDP, TCP | For relayed connections. Not required on the host's network if the computers reach each other directly or Connect uses your own relay. |
*.amazontrust.com, *.comodoca.com |
80 | TCP | Optional: certificate revocation checks |
*.ingest.us.sentry.io |
443 | TCP | Optional: crash reports on Windows and macOS, when enabled |
Jump's servers run behind load balancers, and their IP addresses can change; allow host names, not IP addresses.
Client devices running Jump Desktop use the same neuron, api, and app host names, and turn.jumpdesktop.com for relayed connections. Jump Desktop apps also use mirror.jumpdesktop.com; the Windows and Mac direct-download apps retrieve updates from it.
On macOS with Gatekeeper enabled (the default), also allow Apple's certificate servers: certs.apple.com, ocsp.apple.com, and ocsp2.apple.com (TCP 80 and 443), and crl.apple.com (TCP 80).
Ports for direct connections#
Allow UDP traffic between computers to permit direct connections; otherwise, Jump uses a relay, which can be slower. Connections over a VPN are supported; allow the same ports over the VPN.
The following UDP ports are on the host (the computer running Connect). On the host's firewall, allow inbound UDP to this range and outbound UDP from it. Client devices use any local UDP port, so their network needs to allow only outbound UDP.
| Host | Connect's UDP port range |
|---|---|
| No Connect Configuration assigned | 35385 to 45385 |
| Connect Configuration assigned | Its Connection Port Range: 35385 to 35485 by default, or any port if set to Any |
Configure Connection Port Range in a Connect Configuration (Enterprise plan). To require direct connections, see Choose a connectivity option.
Proxies#
Connect supports HTTPS and SOCKS5 proxies. For configuration steps, see Use a proxy server.
Computers without internet access#
To connect without Jump's cloud, use Cloudless Fluid (Enterprise plan). The ports Cloudless Fluid uses are listed on that page.