> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cdp.coinbase.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Coinbase Derivatives: Predictions Connectivity

## Environments

Coinbase Derivatives: Predictions operates the following environments:

* Production
* Disaster Recovery (DR)
* Sandbox

Production and Disaster Recovery are co-located with Coinbase Derivatives: Futures in Equinix CH4 (Chicago) and Equinix NY5 (Secaucus) and are reachable over the internet or cross connect. Addresses, host names, and ports are coming soon.

The Sandbox is hosted in AWS `us-east-1` across two availability zones and is reachable over the internet only. Sandbox data is test data only.

## Connectivity Protocols

| Type | Protocol | Sandbox Internet Connection | Production / DR Connection |
| :- | :- | :- | :- |
| Order Entry | FIX 5.0 SP2 (FIXT 1.1) | Available | Internet or Cross Connect |
| Market Data | FIX 5.0 SP2 (FIXT 1.1) | Available | Internet or Cross Connect |
| Drop Copy | FIX 5.0 SP2 (FIXT 1.1) | Available | Internet or Cross Connect |
| REST Gateway | HTTPS | Available | Internet or Cross Connect |
| Market Data | WebSocket (WSS) | Available | Internet or Cross Connect |

FIX sessions use `BeginString (8) = FIXT.1.1` and `DefaultApplVerID (1137) = 9` (FIX50SP2).

SBE order entry and UDP multicast market data are not offered for Coinbase Derivatives: Predictions.

## Points of Presence

| Environment | Physical Location | Types of Connectivity available |
| :- | :- | :- |
| Production | Equinix CH4 | Internet or Cross Connect |
| Disaster Recovery | Equinix NY5 | Internet or Cross Connect |
| Sandbox | AWS us-east-1 | Internet |

## Connectivity via Internet

Clients connect to the Sandbox over the internet. Only TLS-encrypted connections are accepted. See [IP Addressing](#ip-addressing) for target host names.

### SSL/TLS Details

The FIX gateways (`fix-order`, `fix-marketdata`, `fix-drop-copy`) accept TLS 1.2 only. Allowlist the two public IP addresses listed under [Sandbox](#sandbox).

* Preferred: TLSv1.2 128 bits ECDHE-RSA-AES128-GCM-SHA256 Curve P-256 DHE 256
* Accepted: TLSv1.2 128 bits ECDHE-RSA-AES128-SHA256 Curve P-256 DHE 256
* Accepted: TLSv1.2 256 bits ECDHE-RSA-AES256-GCM-SHA384 Curve P-256 DHE 256
* Accepted: TLSv1.2 256 bits ECDHE-RSA-AES256-SHA384 Curve P-256 DHE 256
* Accepted: TLSv1.2 128 bits AES128-GCM-SHA256
* Accepted: TLSv1.2 128 bits AES128-SHA256
* Accepted: TLSv1.2 256 bits AES256-GCM-SHA384
* Accepted: TLSv1.2 256 bits AES256-SHA256

The REST and WebSocket host (`cpm-sandbox.coinbase.com`) is served through a CDN. TLS 1.2 and TLS 1.3 are accepted at the CDN edge; cipher suites are negotiated by the CDN and differ from the list above.

## IP Addressing

### Production

#### Unicast (TCP)

| Service | A Feed | B Feed | Internet Host Name | Port |
| :- | :- | :- | :- | :- |
| FIX Order | Coming soon | Coming soon | Coming soon | Coming soon |
| FIX Market Data | Coming soon | Coming soon | Coming soon | Coming soon |
| FIX Drop Copy | Coming soon | Coming soon | Coming soon | Coming soon |

### Disaster Recovery

#### Unicast (TCP)

| Service | A Feed | B Feed | Internet Host Name | Port |
| :- | :- | :- | :- | :- |
| FIX Order | Coming soon | Coming soon | Coming soon | Coming soon |
| FIX Market Data | Coming soon | Coming soon | Coming soon | Coming soon |
| FIX Drop Copy | Coming soon | Coming soon | Coming soon | Coming soon |

> [!NOTE]
>
> Production and Disaster Recovery addresses, host names, and ports are coming soon.

### Sandbox

#### Unicast (TCP)

All three FIX host names resolve to a single sandbox gateway load balancer. The load balancer has one static public IP address in each availability zone (us-east-1a and us-east-1b); DNS returns both, so allowlist both. These are not A/B feeds — either address reaches every gateway.

| Service | Internet Host Name | Port | Static IP Addresses |
| :- | :- | :- | :- |
| FIX Order | fix-order.cpm-sandbox.fairx.net | 6110 | 100.50.13.189, 23.23.253.114 |
| FIX Market Data | fix-marketdata.cpm-sandbox.fairx.net | 6120 | 100.50.13.189, 23.23.253.114 |
| FIX Drop Copy | fix-drop-copy.cpm-sandbox.fairx.net | 6130 | 100.50.13.189, 23.23.253.114 |

#### HTTPS

The REST gateway and WebSocket market data feed are served over HTTPS on port 443 from a single host:

| Service | Internet Host Name | Port | Path |
| :- | :- | :- | :- |
| REST API | cpm-sandbox.coinbase.com | 443 | `/api` |
| WebSocket Market Data | cpm-sandbox.coinbase.com | 443 | `/ws` |