1. Supported platforms   

1.1. Operating systems   

Linux

macOS

2. Hardware requirements

Databridge is typically lightweight, though resource usage scales with the number and type of tasks processed (such as API calls, database queries, SSH operations, PowerShell execution, Active Directory lookups, and file operations).

Approximate disk space accounts for Databridge binaries, the bundled PostgreSQL database, and logs and operational data. Actual disk usage depends on log retention settings and data volume.

3. Network requirements

3.1. Outbound connectivity to Zoho Creator

The Databridge host requires outbound access to the following endpoints on port 443 over HTTPS/WSS (TCP):

Note: Ensure that outbound HTTPS traffic on port 443 from the Databridge host to Zoho Creator endpoints is permitted by your firewall and is not intercepted in a way that breaks WebSocket connections.
For regions outside the US data center, domain addresses may vary based on the data center.

3.2. Internal network connectivity

The Databridge host must have inbound and outbound access within your LAN to reach the internal systems it is expected to integrate with. Supported internal system types include:

• REST and SOAP APIs

• Databases

• Linux or Unix servers (via SSH)

• Windows servers (via PowerShell / WinRM)

• Active Directory and LDAP

• SFTP servers

• File shares (SMB)

A minimum LAN bandwidth of 100 Mbps is recommended. Lower bandwidth may reduce throughput for high task volumes.

3.3. Ports and protocols   

Ensure that the required ports listed below are open based on your use case before proceeding with the setup.

Outbound from Databridge host to Zoho Creator

4. Software dependencies    

 4.1. Java runtime   

Note: No separate Java installation is required on the Databridge host.

4.2. Java service wrapper

Databridge uses the Tanuki Java Service Wrapper (3.5.54) for process launching, monitoring, and deployment as an OS service or daemon.

4.3. Bundled PostgreSQL

The bundled PostgreSQL instance listens only on localhost and is not accessible externally.

4.4. Embedded web server   

 HTTPS can be enabled for the web server using customer-provided certificates. 

4.5. OS utilities   

Linux

• bash, systemd/init, or an equivalent service manager

• curl or wget to download the installer via command line (optional)

Windows

• PowerShell 5.1 or later (PowerShell 7+ also supported)

• curl to download the installer via command line (optional)

5. Target system requirements

5.1. Windows hosts (PowerShell / WinRM) 

• WinRM must be enabled and accessible from the Databridge host.
  
• Minimum PowerShell version: 5.1.

• For PowerShell 7+, ensure appropriate remoting configuration (for example, pwsh remoting).
  

 5.2. Linux / Unix systems

• OpenSSH server must be enabled and reachable from the Databridge host.
  
• Key-based or password authentication is supported, as per your security policy.
  

5.3. Active Directory / LDAP

6. Permissions and accounts

6.1. Windows   

• Use a local service or dedicated domain account for the Databridge service.

• Required privileges: Log on as a service permission, and read/write access to BRIDGE_DIR.

• Avoid using domain administrator accounts. Follow the least-privilege principle.

 6.2. Linux   

• A non-root user is required to run the Databridge service.

• Required privileges: read/write access to BRIDGE_DIR.

• sudo may be required during installation or specific administrative operations, but not for regular runtime, depending on your environment.

7. Security and compliance

7.1. Connectivity to Zoho Creator   

7.2. Certificates   

Zoho Creator endpoints:

• Databridge validates Zoho Creator certificates using the host OS trust store.

Databridge Web UI (optional HTTPS):

• Minimum key length: 2048-bit RSA or equivalent (for example, ECDSA).

8. Deployment Considerations

• Single-server: One Bridge host per environment or network segment (typical) 

• Databridge requires outbound connectivity to Qntrl over HTTPS/WebSockets (443).

• Fully air-gapped environments are not supported.

• If direct internet access is restricted,configure outbound proxy access to Qntrl endpoints. 

Accurate time synchronization is required on:

• The databridge host

• AD / LDAP servers

• Databases and remote systems

Tip:

• NTP or an equivalent time synchronization mechanism.

• Keep clock skew within ±5 minutes maximum (or stricter, depending on authentication mechanisms such as Kerberos or certificate validation).

9. IP & Domain Whitelisting   

9.1. Domain Whitelisting   

Allow outbound access to the following domains based on your region:

9.2. IP Whitelisting   

Whitelist the following outbound IP ranges for your region:

United States (US)    

204.141.32.0/23

204.141.42.0/23

136.143.190.0/23

136.143.186.0/23

136.143.189.0/24

136.143.182.0/23

136.143.180.0/23

136.143.185.0/24

Europe (EU)    

185.20.209.0/24

185.230.212.0/23

87.252.213.0/24

89.36.170.0/24

185.230.214.0/23

India (IN)    

169.148.146.0/23

169.148.148.0/23

103.103.196.0/24

103.103.197.0/24

103.103.198.0/24

103.117.158.0/24

103.117.159.0/24

Australia (AU)    

101.97.36.0/24

103.138.128.0/23

103.91.166.0/24

165.173.191.0/24

Japan (JP)    

103.163.152.0/24

Saudi Arabia (SA)    

199.67.80.0/23
199.67.82.0/23

United Arab Emirates (UAE)    

160.32.184.0/24
160.32.188.0/24
160.32.186.0/24

Canada (CA)    

199.67.85.0/24

10. Points to note

• Databridge requires outbound connectivity to Zoho Creator over HTTPS/WebSockets (port 443). Fully air-gapped environments are not supported.

• If direct internet access is restricted, configure outbound proxy access to the required Zoho Creator endpoints.

• Accurate time synchronization is required on the databridge host, as well as on any AD/LDAP servers, databases, and remote systems it connects to. Use NTP or an equivalent time synchronization mechanism. Keep clock skew within ±5 minutes maximum, or stricter if your environment uses authentication mechanisms such as Kerberos or certificate validation.

• JDBC drivers for supported databases can be updated or replaced independently if a newer database version requires a different driver.

• The bundled PostgreSQL database is for internal databridge use only. It listens on localhost and is not exposed externally; do not use it as a general-purpose database for your applications.

• macOS support is intended for non-production or smaller environments and is not recommended for production deployments.

11. Glossary

• Outbound connection - A connection initiated from inside your network to an external service, eliminating the need for inbound firewall access.

• JDBC driver - The Java connector that Databridge uses to communicate with a database. Drivers can be updated independently when a newer database version requires a different driver.

12. Related topics

• Understanding databridge
  

• Configuring databridge