# What is the complete protocols and ports that are required for the CAG working? **URL:** \ **Category:** Cloud platforms\ **Tags:** activegate, aws, dynatrace-managed\ **Created:** [April 2, 2020, 3:35pm UTC](https://community.dynatrace.com/t/what-is-the-complete-protocols-and-ports-that-are-required-for-the-cag-working/18949 "2020-04-02T15:35:30Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![avakkala](https://avatars.discourse-cdn.com/v4/letter/a/f08c70/32.png) [@avakkala](https://community.dynatrace.com/u/avakkala)\ **Post date:** [April 2, 2020, 3:35pm UTC](https://community.dynatrace.com/t/what-is-the-complete-protocols-and-ports-that-are-required-for-the-cag-working/18949/1 "2020-04-02T15:35:30Z")
I am unable to make my Cluster Active Gate as publicly faced and I want to know the complete protocols and ports that are required for the CAG working. My complete DynaTrace Managed setup is in AWS. I have a load balancer with HTTPS protocol and 9999 port but still its still not getting connected as public facing. ---
**Author:** ![alonso\_decosio](https://avatars.discourse-cdn.com/v4/letter/a/bbe5ce/32.png) [@alonso\_decosio](https://community.dynatrace.com/u/alonso_decosio)\ **Post date:** [April 2, 2020, 4:34pm UTC](https://community.dynatrace.com/t/what-is-the-complete-protocols-and-ports-that-are-required-for-the-cag-working/18949/2 "2020-04-02T16:34:29Z")
Hi Amith, For a cluster ActiveGate, you need an External IP address and open port 443. Take a look at this link for the complete list of ports that the AG use. [Supported connectivity schemes for ActiveGates — Dynatrace Docs](https://www.dynatrace.com/support/help/setup-and-configuration/dynatrace-activegate/configuration/which-network-ports-does-activegate-use/) Alonso ---
**Author:** ![avakkala](https://avatars.discourse-cdn.com/v4/letter/a/f08c70/32.png) [@avakkala](https://community.dynatrace.com/u/avakkala)\ **Post date:** [April 2, 2020, 4:41pm UTC](https://community.dynatrace.com/t/what-is-the-complete-protocols-and-ports-that-are-required-for-the-cag-working/18949/3 "2020-04-02T16:41:14Z")
[@Alonso](https://answers.dynatrace.com/users/18250/view.html) I am looking to establish communication from load balancer to the CAG. In my case, I do have a public facing load balancer with port 9999 to the EC2 instances that have 2 private IP addresses, But still dynatrace CMC is not picking up the load balancer URL in place of Cluster ActiveGate URL. ![24453-1585845669255.png](https://global.discourse-cdn.com/dynatrace/original/2X/7/7a5516d3ce4ed6cf1dbed293c7d8f8e6b7263607.png) ---
**Author:** ![Julius\_Loman](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/julius_loman/32/51_2.png) [@Julius\_Loman](https://community.dynatrace.com/u/Julius_Loman)\ **Post date:** [April 10, 2020, 8:58pm UTC](https://community.dynatrace.com/t/what-is-the-complete-protocols-and-ports-that-are-required-for-the-cag-working/18949/4 "2020-04-10T20:58:53Z")
There can be several reasons for that, but most likely you don’t have correctly set up the load balancer within was to forward the traffic to your Cluster ActiveGate hosts. It does not have to be 443 port. How doe the publicly available address/port respond to https requests? ---
**Author:** ![ChadTurner](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/chadturner/32/161_2.png) [@ChadTurner](https://community.dynatrace.com/u/ChadTurner)\ **Post date:** [April 12, 2020, 6:51am UTC](https://community.dynatrace.com/t/what-is-the-complete-protocols-and-ports-that-are-required-for-the-cag-working/18949/5 "2020-04-12T06:51:45Z")
I would recommend setting the the option to allow Dynatrace to manage this Cluster Activegate, once we did that, all those red X’s went away, ---
**Author:** ![Radoslaw\_Szulgo](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/radoslaw_szulgo/32/1977_2.png) [@Radoslaw\_Szulgo](https://community.dynatrace.com/u/Radoslaw_Szulgo)\ **Post date:** [April 14, 2020, 10:20am UTC](https://community.dynatrace.com/t/what-is-the-complete-protocols-and-ports-that-are-required-for-the-cag-working/18949/6 "2020-04-14T10:20:22Z")
From what I see you were able to configure that. 2 things you definitely remember about: - Domain name has to be resolvable publicly and from each cluster node - LB cannot cut headers passed from the client side.