What is the host “xp.apple.com” for and what is sent there?
They mention it, but they do not provide details:
About macOS, iOS, and iTunes server host connections and iTunes background processes
Some Apple software, including macOS, iOS, and iTunes, uses different ports and servers to connect to various services. iTunes for Windows also installs some processes that run in the background when the software is open.
Make sure that your security software is set up correctly. Setup steps vary by software, so contact the developer for specifics.
On Mac, applications signed by Apple automatically receive incoming connections. This article doesn’t apply if you’re using the macOS built-in Application Firewall.
Server connections
The following servers are used by macOS, iOS, and iTunes:
Apple servers,,,,,,,, *,, *.,,,
Other servers,, *., *., *, *
What is xp.apple.com?: pihole – Reddit
3
Solved! 3Posted by1 year ago
Solved! 2 comments64% UpvotedLog in or sign up to leave a commentLog InSign Up
level 1 · 1y Team – Support / Moderator following servers are used by macOS, iOS, and iTunes:5level 1 · 1yYou can probably block it without issue, it’s used for metrics. 2r/pihole”The Pi-hole® is a DNS sinkhole that protects your devices from unwanted content”
Please read the rules before posting, thanks! 127kMembers336OnlineCreated Sep 2, 2015Top posts august 8th 2020Top posts of august, 2020Top posts 2020helpReddit coinsReddit premiumReddit giftsaboutcareerspressadvertiseblogTermsContent policyPrivacy policyMod policyReddit Inc © 2021. All rights reserved
Use Apple products on enterprise networks
Learn which hosts and ports are required to use your Apple products on enterprise networks.
This article is intended for enterprise and education network administrators.
Apple products require access to the internet hosts in this article for a variety of services. Here’s how your devices connect to hosts and work with proxies:
Network connections to the hosts below are initiated by the device, not by hosts operated by Apple.
Apple services will fail any connection that uses HTTPS Interception (SSL Inspection). If the HTTPS traffic traverses a web proxy, disable HTTPS Interception for the hosts listed in this article.
Make sure your Apple devices can access the hosts listed below.
Apple Push Notifications
Learn how to troubleshoot connecting to the Apple Push Notification service (APNs). For devices that send all traffic through an HTTP proxy, you can configure the proxy either manually on the device or with a configuration profile. Beginning with macOS 10. 15. 5, devices can connect to APNs when configured to use the HTTP proxy with a proxy auto-config (PAC) file.
Device setup
Access to the following hosts might be required when setting up your device, or when installing, updating, or restoring the operating system.
Hosts
Ports
Protocol
OS
Description
Supports proxies
443
TCP
iOS, iPadOS, tvOS, and macOS
Device activation
Yes
443, 80
iOS, iPadOS, tvOS, and macOS
Internet connectivity validation for networks that use captive portals
iOS and iPadOS
eSIM activation
—
123
UDP
iOS, iPadOS, and tvOS
Used by devices to set their date and time
macOS only
Device Management
Network access to the following hosts might be required for devices enrolled in Mobile Device Management (MDM).
*
443, 80, 5223, 2197
Push notifications
Learn more about APNs and proxies.
DEP provisional enrollment
Used by an MDM server to identify which software updates are available to devices that use managed software updates
APNs certificate request portal
Hosts enrollment profiles used when devices enroll in Apple School Manager or Apple Business Manager through Device Enrollment
MDM servers to upload enrollment profiles used by clients enrolling through Device Enrollment in Apple School Manager or Apple Business Manager, and to look up devices and accounts
Required to log in with a Managed Apple ID on Shared iPad
MDM servers to perform operations related to Apps and Books, like assigning or revoking licenses on a device
Apple School Manager and Apple Business Manager
Network access to the following hosts as well as the hosts in the App Store section is required for full functionality of Apple School Manager and Apple Business Manager.
–
Apple Business Manager
Schoolwork Roster service
Software updates
Make sure you can access the following ports for updating macOS, apps from the Mac App Store, and for using content caching.
macOS, iOS, and tvOS
Network access to the following hostnames is required for installing, restoring, and updating macOS, iOS, and tvOS.
80
iOS updates
Rosetta 2 updates
Software update catalog
iOS, tvOS, and macOS updates
macOS updates
iOS, iPadOS, tvOS, and macOS updates
Hosts software update catalogs
macOS Recovery
Software update downloads
iOS, iPadOS, tvOS, and macOS
App Store
Access to the following hosts might be required for updating apps.
Store content such as apps, books, and music
*.
Enterprise App validation
Carrier updates
Cellular devices must be able to connect to the following hosts to install carrier bundle updates.
Cellular carrier bundle updates
Carrier bundle update discovery
Content caching
A Mac that provides content caching must be able to connect to the following hosts, as well as the hosts listed in this document that provide Apple content such as software updates, apps, and additional content.
Server registration
Configuration
Reporting
Clients of macOS content caching must be able to connect to the following hosts.
Content caching locator service
Content caching client public IP determination
Apple Developer
Access to the following hosts is required for app notarization and app validation.
App notarization
Starting with macOS 10. 14. 5, software is checked for notarization before it will run. In order for this check to succeed, a Mac must be able to access the same hosts listed in the Ensure Your Build Server Has Network Access section of Customizing the Notarization Workflow.
17. 248. 128. 0/18
Ticket delivery
17. 250. 64. 0/18
17. 192. 0/19
App validation
iOS, iPadOS, and macOS
App validation, Touch ID and Face ID authentication for websites
Feedback Assistant
Feedback Assistant is an app used by developers and members of the beta software programs to report feedback to Apple. It uses the following hosts:
Port
tvOS only
Provides beta software updates
Used by Feedback Assistant to upload files
Used by Feedback Assistant to file and view feedback
Apple diagnostics
Apple devices might access the following host in order to perform diagnostics used to detect a possible hardware issue.
Used by Apple devices to help detect possible hardware issues
Domain Name System resolution
In order to use encrypted Domain Name System (DNS) resolution in iOS 14, tvOS 14, and macOS Big Sur, the following host will be contacted.
Used for DNS over HTTPS (DoH)
Certificate validation
Apple devices must be able to connect to the following hosts to validate digital certificates used by the hosts in this article.
80, 443
Certificate validation in China
Apple ID
Apple devices must be able to connect to the following hosts in order to authenticate an Apple ID. This is required for all services that use an Apple ID, such as iCloud, app installation, and Xcode.
Apple ID authentication in Settings and System Preferences
Apple ID authentication
iCloud
In addition to the Apple ID hosts listed above, Apple devices must be able to connect to hosts in the following domains to use iCloud services.
iCloud services
iCloud services in China
iWork documents
Additional content
Apple devices must be able to connect to the following hosts to download additional content. Some additional content might also be hosted on third-party content distribution networks.
iOS, iPadOS, and macOS
GarageBand downloadable content
Xcode downloadable components
iPadOS and macOS
Swift Playgrounds
Apple TV screen savers
Firewalls
If your firewall supports using hostnames, you might be able to use most Apple services above by allowing outbound connections to * If your firewall can only be configured with IP addresses, allow outbound connections to 17. 0. 0/8. The entire 17. 0/8 address block is assigned to Apple.
HTTP proxy
You can use Apple services through a proxy if you disable packet inspection and authentication for traffic to and from the listed hosts. Exceptions to this are noted above. Attempts to perform content inspection on encrypted communications between Apple devices and services will result in a dropped connection to preserve platform security and user privacy.
Learn more
See a list of TCP and UDP ports used by Apple software products.
Find out which ports are used by Profile Manager in macOS Server.
Learn about macOS, iOS, and iTunes server host connections and iTunes background processes.
Customize the Notarization Workflow.
Published Date: September 30, 2021