Public IP address list for VMware Update Manager (IP Addresses of dl.broadcom.com)

Products

• VMware vSphere ESXi

Issue/Introduction

This article provides information on the fixed IP addresses used to serve VMware Update Manager (VUM). Users can utilize the IP list as the destination in firewall outbound rules for VUM to meet security requirements.

Environment

• VMware vSphere 7.x
• VMware vSphere 8.x

Cause

In some environments, firewall blocks outbound connections to arbitrary IPs for security concerns. This prevents VUM from connecting to dl.broadcom.com. 

Resolution

VMware Update Manager (VUM) connects to dl.broadcom.com to download updates. dl.broadcom.com is provided through content delivery network (CDN) which significantly improves its download performance. Due to the scale and distributed nature of CDN, in the past it was not possible to host dl.broadcom.com on a fixed list of IP addresses.

VMware by Broadcom has announced that dl.broadcom.com is now being hosted on a fixed list of public IP addresses on CDN.

Public IP List

IPv4	IPv6
162.159.140.167	2a06:98c1:58::a5
172.66.0.165	2606:4700:7::a5

Users can use the IP list and TCP port 80, 443 as allowed destination for firewall outbound rules. This allows VUM to connect to dl.broadcom.com to download patches.

Additional Information

Related: Error: A general system error occurred: Failed to download VIB(s): Error: HTTP Error Code: 403