Subnet Access

This page summarises which ports and routes are open to what on the subnet sets.

Allowed Traffic

All Subnets (Data, Private, Public)

Traffic type Port ranges Source/Destination
Ingress & Egress All Business unit VPC
Ingress & Egress All Inter business unit VPCs where requested
Ingress & Egress All Private address ranges which are not part of the Modernisation Platform (Note, these will be blocked by the Firewall unless appropriate rules are in place)
Egress 443 0.0.0.0/0
Ingress 1024 - 65535 0.0.0.0/0

Public Subnets

Traffic type Port ranges Source/Destination
Ingress 443 0.0.0.0/0
Ingress 1024 - 65535 0.0.0.0/0
Egress All 0.0.0.0/0

Protected Subnets (for VPC endpoints)

Traffic type Port ranges Source/Destination
Ingress 25 Business unit VPC
Ingress 443 Business unit VPC
Ingress 587 Business unit VPC
Ingress 5439 Business unit VPC
Egress 1024 - 65535 Business unit VPC
Last reviewed: 26 February 2026Review status: ✓ Up to dateOwner: #modernisation-platformSource: View source on GitHub

Was this page useful?