What this article covers:

  • Are on-premise installations supported?

  • How on-premise installations are supported

Are on-premise installations supported?

Yes! We support on-premise installations out of the box if they are accessible over the Internet (ie. not behind a firewall or VPN). You'll just need to follow a few additional steps, which are all described in the app.

But what if your servers aren't accessible over the internet?

How other on-premise installations are supported

Here are three ways you can connect Unito to on-premise installations of Jira and GitHub that are behind a firewall or a VPN.

Open firewall ports

Configure your firewall and/or routers to open a specific port and forward traffic to your internal Jira or GitHub Enterprise server. Any port number is fine, as long as it forwards to an HTTPS-enabled port on your server. Specify the port when you type in your server's address in the Unito app.

You can also specify which IP addresses can access your open port for added security. Limit access to Unito's fixed IP addresses and your internal IP addresses. If you can't specify your internal IP address — because of a dynamic IP for instance — just click the chat bubble to reach out to us. We'll figure out a custom configuration for you.

Reverse proxy or API gateway

Instead of exposing the app, you can use another server/service that is reachable over the internet to act as a proxy or frontend for your Jira/GitHub servers. These are called reverse proxies, API Gateways, or Application Gateways. Some examples include Strong Loop, IBM, F5, Oracle, and NGINX.

You can further secure access to the proxy by allowing access to only our IP addresses, by requesting our SSL client certificates, or by requiring custom HTTP headers. For these advanced configurations, we suggest you contact us, and we'll get you all set up in no time.

On-premise agent or tunneling

A light weight "agent" software sits in your infrastructure behind the firewall and initiates communication with the Unito infrastructure, thereby avoiding firewall issues. The agent then maintains a bi-directional connection (or tunnel) using the HTTPS protocol. In this scenario, none of your services are exposed to the Internet.

As an agent, we recommend using the popular ngrok link. It supports end-to-end encryption and IP whitelisting, which provides a fully secured solution when limited to Unito's IP addresses (and your own office IPs). Here's a step-by-step guide to setup ngrok. Contact us if you'd rather avoid a third-party solution.

If any of this is unclear, please click on the chat bubble to reach out to us. We'll be happy to help you get everything set up.

Note: On-premise tool support is only available for Team, Company, and Enterprise plans. If you're on a Personal plan and you need on-premise tool support, please reach out to us and we can talk upgrades! Looking at our Enterprise plan? Check out our Enterprise solutions page.

What's next?

Learn how to connect Unito to on-premise servers.
Learn how to troubleshoot on-premise servers.
Not a Unito user? Try Unito for two weeks free!
Already a user? Sign in here!

Did this answer your question?