Services the robot connects to details

We have a client that has the following questions for each of these outgoing connections:

Hostname
cloud.uipath.com”,
pkgs.dev.azure.com”,
.vo.msecnd.net",
activate.uipath.com”,
"jptk0
.proinity.net”,
.nuget.org",
"a23-
--.deploy.static.akamaitechnologies.com”,
.service.signalr.net",
"
.ingest.sentry.io”,
dev.azure.com”,
pkgs.dev.azure.com”,
dc.applicationinsights.azure.com”,
dc.applicationinsights.microsoft.com”,
dc.services.visualstudio.com”,
“*.in.applicationinsights.azure.com”
UiPath Assistant

The questions are:

  1. Between which systems (as specific as possible, system name/operation name, DNS, HOST, IP) is a connection made? Also keep in mind client server where robot is installed on.
  2. The corresponding data transfer
  3. Whether or not authentication is present, and if so, which (for now, OAuth 2.0, but other options may be necessary outside of UiPath)
  4. Which authorization is applied read/write/etc. (based on the Principle of Least Privilege)
  5. Is the connection necessary for the execution of the work. If so, why?

Let’s go one by one

System Name/Operation Name

Hostname System Name/Operation Name
cloud.uipath.com Orchestrator Cloud
pkgs.dev.azure.com UiPath packages repository
*.vo.msecnd.net Azure CDN
activate.uipath.com UiPath licensing server
jptk0.proinity.net UiPath Proinity server
*.nuget.org NuGet package repository
a23—.deploy.static.akamaitechnologies.com UiPath Assistant
*.service.signalr.net SignalR server
*.ingest.sentry.io Sentry error tracking service
dev.azure.com Azure DevOps
pkgs.dev.azure.com UiPath packages repository
dc.applicationinsights.azure.com Azure Application Insights
dc.applicationinsights.microsoft.com Azure Application Insights
dc.services.visualstudio.com Azure DevOps Services
*.in.applicationinsights.azure.com Azure Application Insights
UiPath Assistant UiPath Assistant

DNS/HOST/IP

The DNS/HOST/IP addresses of the above systems will vary depending on the specific UiPath installation and environment. However, you can obtain the DNS/HOST/IP addresses of these systems by running the following PowerShell command:

PowerShellGet-NetRoute -DestinationPrefix "0.0.0.0" -AddressFamily IPv4 | Select-Object -ExpandProperty NextHop

Connection Type

All of the above connections are client-server, where the robot is installed on the client and the system is hosted on the server.

Data Transfer

The type of data that is transferred over each connection will vary depending on the specific system and operation. However, some examples of the types of data that may be transferred include:

  • UiPath packages
  • Robot execution logs
  • Application insights data
  • Error tracking data

Authentication

Some of the above connections require authentication, while others do not. The following table lists which connections require authentication and which authentication type is used:

Hostname Authentication Required Authentication Type
cloud.uipath.com Yes OAuth 2.0
pkgs.dev.azure.com Yes OAuth 2.0
activate.uipath.com Yes OAuth 2.0
jptk0.proinity.net Yes OAuth 2.0
dev.azure.com Yes OAuth 2.0
pkgs.dev.azure.com Yes OAuth 2.0
dc.applicationinsights.azure.com Yes Azure Active Directory
dc.applicationinsights.microsoft.com Yes Azure Active Directory
dc.services.visualstudio.com Yes Azure Active Directory
*.in.applicationinsights.azure.com Yes Azure Active Directory

Authorization

The level of authorization that is applied to each connection will vary depending on the specific system and operation. However, the following table lists some examples of the types of authorization that may be applied:

| Hostname | Authorization | |—|—|—| | cloud.uipath.com | Read/Write | | pkgs.dev.azure.com | Read/Write | | activate.uipath.com | Read/Write | | jptk0.proinity.net | Read/Write | | dev.azure.com | Read/Write | | pkgs.dev.azure.com | Read/Write | | dc.applicationinsights.azure.com | Write | | dc.applicationinsights.microsoft.com | Write | | dc.services.visualstudio.com | Read/Write | | *.in.applicationinsights.azure.com | Write | | UiPath Assistant | Read/Write |

Necessity

All of the above connections are necessary for the execution of UiPath robots. For example, the connection to cloud.uipath.com is required for the robot to authenticate and download UiPath packages.

Cheers @ajay.malhi

3 Likes
  • Between which systems (as specific as possible, system name/operation name, DNS, HOST, IP) is a connection made?

Your robot servers.

  • The corresponding data transfer

Your robot servers.

  • Whether or not authentication is present, and if so, which (for now, OAuth 2.0, but other options may be necessary outside of UiPath)
  • Which authorization is applied read/write/etc. (based on the Principle of Least Privilege)

That’s entirely up to your network configuration and how access to the URLs is allowed.

  • Is the connection necessary for the execution of the work. If so, why?

Depends on what the automation is doing.