The diagram below illustrates how key components interconnect in a single-cluster deployment of Instant Connect Enterprise.

ICE Mobile and ICE Desktop clients can be deployed on any network with reachability to the ICE Server system via ports 443 (HTTPS) and 7443 (SSL). When those clients are able to communicate with one another over IGMP multicast, then they will be able to communicate in failover mode if their link to the Rallypoint fails. Note that ports 443 and 7443 are only defaults; the actual ports used for provisioning and voice traffic can be changed to any value by modifying the cluster’s ingress controller (not illustrated).

The ICE Telephony component is deployed as a Docker container on a separate server outside the Kubernetes cluster. This host must have reachability back to the ICE Server cluster as well as unfettered voice access to the Call Manager which it is bridging. The actual protocols and ports used in this SIP/UDP link are negotiated at registration and call time. External IT systems which intend to interact with ICE Server’s RESTful web services API need to be able to reach port 443 on the server.