IMPORTANT NOTE:
This article will be deprecated by February 28th, 2025. For all API Co-signer documentation, visit this overview article, which also links to updated Co-signer content in the Developer Portal.
Overview
The API Co-Signer server actively queries your Fireblocks workspace for activity. There is no incoming communication for security and simplicity. The outbound connections required during setup or server maintenance can be closed after regular workspace activity has resumed.
Networking requirements
Inbound connections
No inbound connections are required.
Outbound connections
Access required during setup and when stopping or restarting the machine:
- Download Docker over port 443 to https://download.docker.com/linux/
- Download pip over port 443 to https://bootstrap.pypa.io/get-pip.py/
- Comment this out if you want to install it yourself.
- Open port 5000 to https://registry.gitlab.com/customer-cosigner/
- Download SGX driver (if not already installed): https://download.01.org/intel-sgx/sgx-dcap/1.10.3/linux/distro/ubuntu20.04-server/
- Install docker-compose: https://github.com/docker/compose/releases/download/1.29.2/
- Install prerequisites packages apt-update over port 80: http://azure.archive.ubuntu.com/ubuntu
- Whitelist the following URLs:
- https://fb-certs.s3.amazonaws.com
- https://mobile-api.fireblocks.io/
- https://fb-customers.s3.amazonaws.com/uploads/
- https://s3signurl.fireblocks.io/
- https://bootstrap.pypa.io
- https://cdn.registry.gitlab-static.net
- https://fb-cosigner-images.s3.amazonaws.com
- https://fb-customers.s3.amazonaws.com
- https://files.pythonhosted.org
- https://github.com
- https://gitlab.com
- https://pypi.org
- https://pypi.python.org
- https://registry.gitlab.com
All times the API Co-Signer is active:
- Open port 443 to https://fb-certs.s3.amazonaws.com
- Open port 443 to https://mobile-api.fireblocks.io/
- Open port 443 to https://fb-customers.s3.amazonaws.com/uploads/
- Open port 443 to https://s3signurl.fireblocks.io/