Carbonite Support > Routing Carbonite Safe Server ...

Routing Carbonite Safe Server Backup Network Traffic

  • This article is for Windows only
  • Support cannot assist with this process however we have included the information in this article to help guide your troubleshooting efforts
    • If you require further assistance please see an Apple or Microsoft technician

It is sometimes necessary to route internet traffic for performance, compliance, or other reasons. Carbonite Safe Server Backup reaches out to several endpoints, and access must be granted to all of them. CSSB communicates over SSL on port 443 for all endpoints.

If you have enabled restrictive firewall settings, including but not limited to "Geo-blocking," you must ensure that CSSB can reach out to all applicable endpoints.

With Carbonite Safe Server Backup, your endpoints are:

  • storage.googleapis.com
  • carbonite.com (and all subdomains of .carbonite.com)
  • azure-devices.net (and all subdomains of .azure-devices.net)*
  • amazonaws.com (and all subdomains of .amazonaws.com)

*You must enable all inbound and outbound traffic to *.azure-devices.net. There is no option to look up IP addresses for this endpoint.

You may also enable all inbound and outbound traffic to carbonite.com and storage.googleapis.com. You may also look up IP address ranges for these two endpoints, allowing you to perform more selective routing.

The sections below are collapsed. Please click the section title to open / close a particular section.

How to Determine an IP Address for the Endpoint

To determine an IP address for the endpoint, open a command prompt and enter the following command (without the brackets): nslookup [endpoint].

The results of the nslookup command will include an IP address currently used by CSSB.

In the example below, we used the location storage.googleapis.com and have determined the IP address to be 74.125.142.132.

Run these commands and determine an IP address for each of the endpoints used by CSSB. Your results may vary from the example.

Example

nslookup storage.googleapis.com
Server: 8.8.8.8
Address: 8.8.8.53

Non-authoritative answer:
Name: storage-ugc.1.googleusercontent.com
Addresses: 2607:f8b0:400d:c00::84
74.125.142.132
Aliases: storage.googleapis.com
How to Run a Whois Query on the IP Address

We need to determine the entire range of IP addresses (the NetRange) available for cloud backup. We can get this range by running a whois query on the IP address we gathered above.

It is usually easiest to run a whois query from a website such as http://www.networksolutions.com/whois/index.jsp.

In the example below, we have determined the NetRange is 74.125.0.0 to 74.125.255.255.

Example

Net Range:74.125.0.0 - 74.125.255.255
CIDR:74.125.0.0/16
OriginAS:
NetName:GOOGLE
NetHandle:NET-74-125-0-0-1
Parent:NET-74-0-0-0-0
NetType:Direct Allocation
RegDate:2007-03-13
Updated:2012-02-24
Ref:http://whois.arin.net/rest/net/NET-74-125-0-0-1

Note: The OriginAS field was left blank in this example since it did not return any information.

Once you have the NetRange, you can then route traffic to the cloud IP addresses used by Carbonite Safe Server Backup. This can be used for routing traffic, setting up a firewall, and so on.

Feedback