Routing Carbonite Safe Server Backup Network Traffic
- This article is for Windows only
- Support cannot assist with this process however we have included the information in this article to help guide your troubleshooting efforts
- If you require further assistance please see an Apple or Microsoft technician
It is sometimes necessary to route internet traffic for performance, compliance, or other reasons. Carbonite Safe Server Backup reaches out to several endpoints, and access must be granted to all of them. CSSB communicates over SSL on port 443 for all endpoints.
If you have enabled restrictive firewall settings, including but not limited to "Geo-blocking," you must ensure that CSSB can reach out to all applicable endpoints.
With Carbonite Safe Server Backup, your endpoints are:
- storage.googleapis.com
- carbonite.com (and all subdomains of .carbonite.com)
- azure-devices.net (and all subdomains of .azure-devices.net)*
- amazonaws.com (and all subdomains of .amazonaws.com)
*You must enable all inbound and outbound traffic to *.azure-devices.net. There is no option to look up IP addresses for this endpoint.
You may also enable all inbound and outbound traffic to carbonite.com and storage.googleapis.com. You may also look up IP address ranges for these two endpoints, allowing you to perform more selective routing.
The sections below are collapsed. Please click the section title to open / close a particular section.
To determine an IP address for the endpoint, open a command prompt and enter the following command (without the brackets): nslookup [endpoint].
The results of the nslookup command will include an IP address currently used by CSSB.
In the example below, we used the location storage.googleapis.com and have determined the IP address to be 74.125.142.132.
Run these commands and determine an IP address for each of the endpoints used by CSSB. Your results may vary from the example.
Example
nslookup storage.googleapis.comServer: 8.8.8.8
Address: 8.8.8.53
Non-authoritative answer:
Name: storage-ugc.1.googleusercontent.com
Addresses: 2607:f8b0:400d:c00::84
We need to determine the entire range of IP addresses (the NetRange) available for cloud backup. We can get this range by running a whois query on the IP address we gathered above.
It is usually easiest to run a whois query from a website such as http://www.networksolutions.com/whois/index.jsp.
In the example below, we have determined the NetRange is 74.125.0.0 to 74.125.255.255.
Example
Net Range:74.125.0.0 - 74.125.255.255CIDR:74.125.0.0/16
OriginAS:
NetName:GOOGLE
NetHandle:NET-74-125-0-0-1
Parent:NET-74-0-0-0-0
NetType:Direct Allocation
RegDate:2007-03-13
Updated:2012-02-24
Ref:http://whois.arin.net/rest/net/NET-74-125-0-0-1
Note: The OriginAS field was left blank in this example since it did not return any information.
Once you have the NetRange, you can then route traffic to the cloud IP addresses used by Carbonite Safe Server Backup. This can be used for routing traffic, setting up a firewall, and so on.