DGX OS Connectivity Requirements#

This appendix describes the network connectivity requirements for DGX OS 8 systems running Ubuntu 26.04.

Some DGX OS services require network communication. The following tables describe the port, protocol, direction, and purpose for those services. The direction shown is relative to the DGX system. Connectivity requirements depend on the features that are enabled on the DGX system. DGX administrators should consider site-specific access needs and allow only the required communication.

In-Band Management, Storage, and Compute Networks#

The following table provides information about the in-band management, storage, and compute networks.

In-Band Management, Storage, and Compute Networks#

Port (Protocol)

Direction

Use

22 (TCP)

Inbound, when SSH access is enabled

SSH

53 (TCP/UDP)

Outbound

DNS

80 (TCP)

Outbound, when package updates are enabled

HTTP access to Ubuntu and DOCA package repositories

111 (TCP/UDP)

Inbound/Outbound when NFS/RPC is enabled

RPCBIND when NFS/RPC services are enabled. Configure the required NFS service ports.

273 (TCP)

Host-local

Local NVSM API

443 (TCP)

Outbound, when package updates or NGC access is enabled

HTTPS access to NVIDIA package repositories and the NVIDIA NGC Container Registry

1883 (TCP)

Host-local

MQTT/Mosquitto service traffic used by NVIDIA System Management

By default, the nvsm-mqtt.service broker listens only on 127.0.0.1:1883 and [::1]:1883 for signaling within NVSM API components. It does not require an opening in an external firewall.

For package updates, allow outbound access to the following repository hosts:

  • TCP port 80: archive.ubuntu.com, security.ubuntu.com, and linux.mellanox.com for the DOCA BaseOS 9 repository. Also allow changelogs.ubuntu.com when performing a release upgrade.

  • TCP port 443: repo.download.nvidia.com for the DGX/BaseOS repository, developer.download.nvidia.com for the CUDA repository, and workbench.download.nvidia.com when the AI Workbench source is enabled.

  • TCP port 443: nvcr.io when you use the NVIDIA NGC Container Registry.

These hosts reflect the default DGX OS 8 repository configuration. Use the configured ubuntu.sources, nvidia.sources, and dgx.sources files as the authority for the repositories enabled on a system.

Note

When you use a proxy, ensure that the proxy and network configuration permit DNS resolution and outbound HTTP/HTTPS access to the required repository hosts. If you use NGC containers, also permit access to the NVIDIA NGC Container Registry.

Out-of-Band Management#

The following table provides information about out-of-band management for your DGX system.

Out-of-Band Management#

Port (Protocol)

Direction

Use

443 (TCP)

Inbound

BMC HTTPS, remote console, and virtual-media access.

623 (UDP)

Inbound, optional

IPMI/RMCP

Note

A network firewall can prevent remote BMC access over TCP port 443.