Bold BI in Fully Offline / Restricted Network Environments
Overview
Bold BI supports deployment in fully offline, restricted-network, and isolated environments. Core product functionality, including dashboard rendering, dashboard viewing, report execution, and data source connectivity, remains operational even when internet access is unavailable.
While Bold BI can function without internet connectivity, the application may still attempt outbound connections to certain external services used for telemetry, licensing, and update-related operations. This article explains why these connections occur, their impact when blocked, and the recommended approach for organizations requiring strict network isolation.
Is a Fully Offline Deployment Supported?
Yes.
A fully offline deployment is a supported configuration for Bold BI. Core capabilities continue to function without internet connectivity, including:
- Dashboard rendering
- Dashboard viewing
- Data source access and visualization
- Standard dashboard operations
Why Does Bold BI Make Outbound Connections?
Bold BI may attempt outbound connections to certain external services that support non-core functionality. These requests may occur during service startup and, in some cases, during normal application usage.
External Services Contacted
1. Cloudflare Endpoints
Used for:
- Product telemetry
- Usage analytics
2. Microsoft Endpoints
Used for:
- Online license validation
- Subscription verification
3. Syncfusion Endpoints
Used for:
- License-related checks
- Product update verification
Note: These connections are not required for dashboard rendering, report execution, or standard dashboard usage.
What Happens If Outbound Access Is Blocked?
If outbound access to these services is blocked:
- The connection attempt fails.
- The request eventually times out.
- Bold BI falls back to internal handling mechanisms where applicable.
- Core dashboard and reporting functionality continues to operate normally.
Expected Behavior
- Dashboards remain accessible.
- Dashboards continue to execute normally.
- Data source access remains functional.
- Minor delays may occur during application startup or specific background operations while connection attempts time out.
Can These Outbound Calls Be Disabled?
At present, there is no application-level setting or configuration option to completely disable these outbound calls.
We continue to evaluate potential product enhancements that may provide additional control in future releases.
Current Workaround: Network-Level Restrictions
Organizations with strict security requirements can restrict these outbound connections using firewall rules or network policies.
Endpoints That Can Be Blocked
IP addresses associated with Cloudflare, Microsoft, and Syncfusion services may change over time. Domain-based firewall rules are recommended whenever possible.
IP Addresses
104.18.38.233 (Cloudflare telemetry)
172.64.149.23 (Cloudflare CDN)
150.171.27.10 (Microsoft licensing)
150.171.28.10 (Microsoft licensing)
Domains
*.syncfusion.com
*.cloudflare.com
*.microsoftonline.com
Behavior After Blocking These Endpoints
- The application attempts the connection.
- The request ultimately fails or times out.
- Bold BI continues operation using fallback logic.
- Core dashboard functionality remains available.
Which External Domains Must Be Allowed?
No external domains are mandatory for dashboard rendering, dashboard viewing, report execution, data source connectivity, or standard reporting operations.
Allowing access to the identified services enables:
- Telemetry and usage analytics
- Online license validation
- Subscription verification
- Product update-related functionality