Network Infrastructure Requirements
This document outlines the network requirements for devices connected to the PhyStack platform. It includes information about offline support, IP whitelisting, and domain-specific configurations based on your tenant’s data residency.
In-store Devices Firewall Configuration
Section titled “In-store Devices Firewall Configuration”Offline Support
Section titled “Offline Support”For Screen Apps, devices must connect to the internet at least once to download content and assets. All apps, assets, and web resources will be downloaded on first launch and will function offline once the content has been downloaded. Internet-based functionality will be suspended until the device is connected again. A sync will take place to update according to the console when the device reconnects to the internet after being offline.
PhyOS v1+
Section titled “PhyOS v1+”For devices running PhyOS v1.0.3 or higher, whitelist the following IP addresses based on tenant’s data-residency to establish connectivity to the PhyStack platform.
Australia
Section titled “Australia”| IP Address | Port | Protocol | Description |
|---|---|---|---|
| 20.103.183.92 | 443 | TCP & UDP | Provisioning |
| 20.211.138.232 | 443 | TCP & UDP | Post-provisioning |
European Union
Section titled “European Union”| IP Address | Port | Protocol | Description |
|---|---|---|---|
| 20.103.183.92 | 443 | TCP & UDP | Provisioning |
| 20.126.185.169 | 443 | TCP & UDP | Post-provisioning |
| IP Address | Port | Protocol | Description |
|---|---|---|---|
| 20.103.183.92 | 443 | TCP & UDP | Provisioning |
| 20.219.43.36 | 443 | TCP & UDP | Post-provisioning |
United Arab Emirates
Section titled “United Arab Emirates”| IP Address | Port | Protocol | Description |
|---|---|---|---|
| 20.103.183.92 | 443 | TCP & UDP | Provisioning |
| 20.233.13.206 | 443 | TCP & UDP | Post-provisioning |
United States
Section titled “United States”| IP Address | Port | Protocol | Description |
|---|---|---|---|
| 20.103.183.92 | 443 | TCP & UDP | Provisioning |
| 20.121.94.131 | 443 | TCP & UDP | Post-provisioning |
PhyOS v2+
Section titled “PhyOS v2+”For devices running PhyOS v2 or higher, whitelist the following IP addresses based on tenant’s data-residency to establish connectivity to the PhyStack platform.
Australia
Section titled “Australia”| IP Address | Port | Protocol | Description |
|---|---|---|---|
| 20.240.22.238 | 443 | TCP | Provisioning |
| 4.147.66.95 | 443 | TCP | Post-provisioning |
European Union
Section titled “European Union”| IP Address | Port | Protocol | Description |
|---|---|---|---|
| 20.240.22.238 | 443 | TCP | Provisioning / Post-provisioning |
| IP Address | Port | Protocol | Description |
|---|---|---|---|
| 20.240.22.238 | 443 | TCP | Provisioning |
| 20.244.60.6 | 443 | TCP | Post-provisioning |
United Arab Emirates
Section titled “United Arab Emirates”| IP Address | Port | Protocol | Description |
|---|---|---|---|
| 20.240.22.238 | 443 | TCP | Provisioning |
| 20.203.114.39 | 443 | TCP | Post-provisioning |
United States
Section titled “United States”| IP Address | Port | Protocol | Description |
|---|---|---|---|
| 20.240.22.238 | 443 | TCP | Provisioning |
| 20.237.18.225 | 443 | TCP | Post-provisioning |
Employee Tools and Queue Management
Section titled “Employee Tools and Queue Management”For employee devices that work with the PhyStack/PhyGrid productivity and clienteling tools, the following domains need to be whitelisted in your firewall.
United States
Section titled “United States”| Domain | Description |
|---|---|
| api.omborigrid.com api.phygrid.com api.phystack.com | PhyStack API |
| screen.omborigrid.com screen.phygrid.com screen.phystack.com | PhyStack Screen Apps |
| queue-us.ombori.com | Employee Queue Web UI US Region |
| tasks-us.ombori.com | Employee Task Web UI US Region |
| realtime-us.omborigrid.com realtime-us.phygrid.com realtime-us.phystack.com | PhyStack Realtime Channel |
| analytics.omborigrid.com analytics.phygrid.com analytics.phystack.com | Analytics Service |
European Union
Section titled “European Union”| Domain | Description |
|---|---|
| api.omborigrid.com api.phygrid.com api.phystack.com | PhyStack API |
| screen.omborigrid.com screen.phygrid.com screen.phystack.com | PhyStack Screen Apps |
| queue-eu.ombori.com | Employee Queue Web UI EU Region |
| tasks-eu.ombori.com | Employee Task Web UI EU Region |
| realtime-eu.omborigrid.com realtime-eu.phygrid.com realtime-eu.phystack.com | PhyStack Realtime Channel |
| analytics.omborigrid.com analytics.phygrid.com analytics.phystack.com | Analytics Service |
Australia
Section titled “Australia”| Domain | Description |
|---|---|
| api.omborigrid.com api.phygrid.com api.phystack.com | PhyStack API |
| screen.omborigrid.com screen.phygrid.com screen.phystack.com | PhyStack Screen Apps |
| queue-au.ombori.com | Employee Queue Web UI AU Region |
| tasks-au.ombori.com | Employee Task Web UI AU Region |
| realtime-au.omborigrid.com realtime-au.phygrid.com realtime-au.phystack.com | PhyStack Realtime Channel |
| analytics.omborigrid.com analytics.phygrid.com analytics.phystack.com | Analytics Service |
United Arab Emirates
Section titled “United Arab Emirates”| Domain | Description |
|---|---|
| api.omborigrid.com api.phygrid.com api.phystack.com | PhyStack API |
| screen.omborigrid.com screen.phygrid.com screen.phystack.com | PhyStack Screen Apps |
| queue-uae.ombori.com | Employee Queue Web UI UAE Region |
| tasks-uae.ombori.com | Employee Task Web UI UAE Region |
| realtime-uae.omborigrid.com realtime-uae.phygrid.com realtime-uae.phystack.com | PhyStack Realtime Channel |
| analytics.omborigrid.com analytics.phygrid.com analytics.phystack.com | Analytics Service |
| Domain | Description |
|---|---|
| api.omborigrid.com api.phygrid.com api.phystack.com | PhyStack API |
| screen.omborigrid.com screen.phygrid.com screen.phystack.com | PhyStack Screen Apps |
| queue-in.ombori.com | Employee Queue Web UI IN Region |
| tasks-in.ombori.com | Employee Task Web UI IN Region |
| realtime-in.omborigrid.com realtime-in.phygrid.com realtime-in.phystack.com | PhyStack Realtime Channel |
Other browser-based devices
Section titled “Other browser-based devices”For devices such as Tizen, Android, third-party digital signage systems, or any other device utilizing PhyStack Screen applications within a web browser, the following firewall configurations are necessary:
| Domain | Description |
|---|---|
| app.omborigrid.com app.phygrid.com app.phystack.com | PhyStack App Releases |
| storage.googleapis.com | Google Workbox |
| media.omborigrid.com media.phygrid.com media.phystack.com | PhyStack Media |
| tts-proxy.northeurope.cloudapp.azure.com | TTS Service |
| o190418.ingest.sentry.io | Sentry Error Reporting |
| analytics.omborigrid.com analytics.phygrid.com analytics.phystack.com | Analytics Service |
| api.omborigrid.com api.phygrid.com api.phystack.com | PhyStack API |
| qr.run | URL Shortener Service |
| installations-service.omborigrid.com installations-service.phygrid.com installations-service.phystack.com | PhyStack Installations Service |
| tizen.omborigrid.com tizen.phygrid.com tizen.phystack.com | PhyStack Tizen Supervisor |
| gridhealth.blob.core.windows.net | Screenshot and device status service |
| realtime-au.omborigrid.com realtime-au.phygrid.com realtime-au.phystack.com | PhyStack Signals - Realtime events |
| realtime-eu.omborigrid.com realtime-eu.phygrid.com realtime-eu.phystack.com | PhyStack Signals - Realtime events |
| realtime-in.omborigrid.com realtime-in.phygrid.com realtime-in.phystack.com | PhyStack Signals - Realtime events |
| realtime-uae.omborigrid.com realtime-uae.phygrid.com realtime-uae.phystack.com | PhyStack Signals - Realtime events |
| realtime-us.omborigrid.com realtime-us.phygrid.com realtime-us.phystack.com | PhyStack Signals - Realtime events |
Advanced Scenario: Firewall Openings for Internal System Integration
Section titled “Advanced Scenario: Firewall Openings for Internal System Integration”In advanced scenarios where PhyStack needs to communicate with internal retailer systems, such as querying inventory and product information APIs, you may need to open specific firewall ports to allow inbound traffic from PhyStack. This is not our standard approach for integration and should only be used when necessary. In these cases, you should whitelist the following IP addresses, based on your tenant’s Data Residency.
Global (required for all data residencies)
Section titled “Global (required for all data residencies)”| IP Address |
|---|
| 20.91.176.195 |
| 20.240.8.184 |
| 20.103.188.246 |
| 20.103.191.105 |
| IP Address |
|---|
| 20.193.43.178 |
| 20.193.43.210 |
| IP Address |
|---|
| 20.240.25.169 |
| 20.240.25.198 |
| IP Address |
|---|
| 20.207.65.55 |
| 20.204.234.88 |
| IP Address |
|---|
| 20.203.77.64 |
| 20.203.77.62 |
| IP Address |
|---|
| 20.232.86.63 |
| 20.121.248.244 |
Please note that the specific ports and protocols used will vary depending on your internal system requirements. Consult your internal IT team for the appropriate configuration.