This page summarises which ports and routes are open to what on the subnet sets.
Allowed Traffic
All Subnets (Data, Private, Public)
Traffic type
Port ranges
Source/Destination
Ingress & Egress
All
Business unit VPC
Ingress & Egress
All
Inter business unit VPCs where requested
Ingress & Egress
All
Private address ranges which are not part of the Modernisation Platform (Note, these will be blocked by the Firewall unless appropriate rules are in place)
Egress
443
0.0.0.0/0
Ingress
1024 - 65535
0.0.0.0/0
Public Subnets
Traffic type
Port ranges
Source/Destination
Ingress
443
0.0.0.0/0
Ingress
1024 - 65535
0.0.0.0/0
Egress
All
0.0.0.0/0
Protected Subnets (for VPC endpoints)
Traffic type
Port ranges
Source/Destination
Ingress
25
Business unit VPC
Ingress
443
Business unit VPC
Ingress
587
Business unit VPC
Ingress
5439
Business unit VPC
Egress
1024 - 65535
Business unit VPC
Last reviewed: 26 February 2026Review status:✓ Up to dateOwner: #modernisation-platformSource:View source on GitHub