ggLeap and ggRock Network Communication Requirements
This article aims to provide network communication requirements for cloud-hosted ggCircuit services
Outbound IPs
- Fastly: ggLeap API runs through Fastly, requiring their outbound IPs for API access. These IPs change periodically, so subscribing to updates is recommended.
- AWS: Add AWS IP ranges for SQS (tcp/443) and API gateway (tcp/443) to enable ggLeap client-to-backend communication (non-API).
- Cloudflare: Alow Cloudflare IP ranges.
- IP list: https://www.cloudflare.com/ips/
Extracting IP Ranges with PowerShell
Use these PowerShell commands to extract IP ranges from the AWS JSON file:
- Install the AWS Tools module:
Install-Module -Name AWS.Tools.Common- Get and filter IPv4 IP prefixes:
Get-AWSPublicIpAddressRange | where {$_.IpAddressFormat -eq "Ipv4"} | select IpPrefixAdditional Considerations
- Firewall/Security Groups: Ensure your firewall or security group rules allow both inbound and outbound traffic to/from the specified IP ranges on the necessary ports (primarily tcp/443).
- Regular Updates: IPs in these lists change periodically. Implement a process to keep these updated in your network configuration.
- Testing: After making changes, thoroughly test your ggLeap and ggRock setup to ensure proper communication and functionality.
ggRock Server Network Requirements
For ggRock server updates and core functionality, the following URLs must be accessible:
Package Repositories:
ggRock Application:
- https://api.ggleap.com
- https://loki-external.monitoring.ggcircuit.com:3101
- https://github.com
- https://ggrock.com
Troubleshooting ggLeap after a network interruption
An unforeseen interruption—even a brief network flicker—can break communication between the Web Admin and client PCs and cause clients to enter offline or fake admin mode. If ggLeap remains stuck after login, or a machine appears offline even though Windows has internet access:
- Check the local network, ISP connection, and network equipment. Restart the router, switch, or other network gear, then test again. If possible, test using another ISP; an issue affecting only one location or branch is likely local.
- On the affected PC, enter Admin mode and open Command Prompt. Run
ping 8.8.8.8to verify connectivity, and capture the result for troubleshooting. - Restart the affected PC. This is the preferred way to relaunch ggLeap after Admin mode and allows it to start in shell mode. You can alternatively sign out of Windows with Ctrl + Alt + Del and sign back in.
- If the issue affects multiple PCs, reboot the server and test again. For a single affected PC, swap its network cable with the cable from a working PC to help isolate a local cable or machine issue.
- If login remains stuck, update one PC using the latest Alpha installer at https://download.ggleap.com/alpha, confirm the version number on the login screen, and test before applying the update to other PCs.
- Ensure firewalls and security groups allow client access to the required ggLeap services, primarily over TCP/443. See the client URLs below.
ggLeap Client Network Requirements
ggLeap clients require access to the following URLs:
- https://api.ggleap.com
- https://sqs.us-east-1.amazonaws.com
- https://media.ggleap.com
- https://updates.ggleap.com
- https://s3.amazonaws.com
- https://s3.us-east-1.amazonaws.com
- https://media.ggleap.com.s3.us-east-1.amazonaws.com
Third-Party Integrations:
Kidas:
- https://kidas-installation-logs.s3.us-west-2.amazonaws.com
- https://kidas-updater-prod.s3.us-west-2.amazonaws.com
Salad:
Updated on: 10/11/2026
Thank you!
