Access Tier

Updated On: Apr 24, 2026

The Access Tier is an identity-aware proxy and gateway that mediates access between entities on the internet and your internal services. Each Access Tier has a public IP address that is reachable from the internet and accepts inbound connections on the following ports:

  • TCP 80 and TCP 443 (Web Services),
  • TCP 8443 (Infrastructure Services), and
  • UDP 51820 (Service Tunnels).

Private Edge Access Tiers require outbound access to a TCP port between 21000-59999, outbound towards CSE Shields, located in one of two destinations based on the org's data center location: gkp-usw1-at01.infra.banyanops.com (North America) and gkp-euw2-at01.infra.banyanops.com (Europe).

TCP ports are provisioned on a per org basis.

Sections