justngrok
commented
2 weeks ago Believe this is all of them: Possible Agent connection addresses (depending on region and agent version). LIst: https://s3.amazonaws.com/dns.ngrok.com/tunnel.json All 443 Addresses changed with Agent 3.3.0 release. Prior to 3.3.0: tunnel... 3.3.0+ connect....
CRL Check Prior to 3.10.0: crl.ngrok.com 80 3.10.0+: crl.ngrok-agent.com 80
Update Check Update: update.equinox.io 443
CRL can be disabled by: crl_noverify: false Update can be disabled: update_check: false
Start a discussion if we should list the multiple addresses the Agent will use to connect to ngrok.
We assume that 443 and 80 outbound are open, but this isn't the case in larger organizations. They also have to whitelist outbound domains, etc.
Maybe add something here? https://ngrok.com/docs/guides/running-behind-firewalls/
Agent Connection addresses CRL addreses Update (equinox) address.