Security / Firewall

At TilliT, we place the highest importance on security and employ the latest and most advanced technologies to keep your confidential information safe. We take security seriously and employ industry-recommended measures such as encrypted data storage and secure authentication methods to protect your data. With TilliT, you can feel confident knowing your information is secure and protected.

The endpoints listed below are intended for production use. If you wish to set up a TilliT Edge device for your staging account, please contact us to request the appropriate endpoints.

Firewall Exceptions

Whether using the TilliT Edge, the Self-managed container or any clients (Ignition or NodeRED), the edge network needs to have access to TilliT.

The Following outbound firewall rules need to be in place for proper connectivity. You may use a wildcard (e.g., *.amazonaws.com) at your own risk.

Australia & New Zealand

Domain Name	Protocol	Ports
tillit.cloud	TCP (HTTPS)	443
iot.tillit.cloud	TCP (MQTT)	8883
logs.ap-southeast-2.amazonaws.com	TCP (HTTPS)	443
production-tillit-edge-au.s3.ap-southeast-2.amazonaws.com	TCP (HTTPS)	443
c3q1ipr2u5vdmn.credentials.iot.ap-southeast-2.amazonaws.com	TCP (HTTPS)	443
acgtk2he491xh-ats.iot.ap-southeast-2.amazonaws.com	TCP (MQTT)	8883,443,8443
greengrass-ats.iot.ap-southeast-2.amazonaws.com	TCP (HTTPS)	443
evergreencomponentmanageme-artifactbucket7410c9ef-b7nmxghuaqsx.s3.ap-southeast-2.amazonaws.com	TCP (HTTPS)	443

Americas

Domain Name	Protocol	Ports
tillit.cloud	TCP (HTTPS)	443
iot-us.tillit.cloud	TCP (MQTT)	8883
logs.us-east-2.amazonaws.com	TCP (HTTPS)	443
production-tillit-edge-us.s3.us-east-2.amazonaws.com	TCP (HTTPS)	443
c3q1ipr2u5vdmn.credentials.iot.us-east-2.amazonaws.com	TCP (HTTPS)	443
acgtk2he491xh-ats.iot.us-east-2.amazonaws.com	TCP (MQTT)	8883,443,8443
greengrass-ats.iot.us-east-2.amazonaws.com	TCP (HTTPS)	443
evergreencomponentmanageme-artifactbucket7410c9ef-m8ax4z2bcf3q.s3.us-east-2.amazonaws.com	TCP (HTTPS)	443

Proxy Exceptions

TilliT Edge, powered by AWS IoT Greengrass, utilises mutual TLS (mTLS) to establish secure connectivity to the cloud. Any proxy software that performs decryption of a TLS connection will break this connectivity. Please add the following endpoints as exceptions to your proxy software.

Australia & New Zealand

Domain Name	Ports
c3q1ipr2u5vdmn.credentials.iot.ap-southeast-2.amazonaws.com	443
acgtk2he491xh-ats.iot.ap-southeast-2.amazonaws.com	443

Americas

Domain Name	Ports
c3q1ipr2u5vdmn.credentials.iot.us-east-2.amazonaws.com	443
acgtk2he491xh-ats.iot.us-east-2.amazonaws.com	443