You can run Dante Domain Manager (DDM) on an Amazon Web Services (AWS) EC2 instance that you own and manage. Your Dante devices stay on your local network, and only control and monitoring traffic travels between them and DDM. Audio never leaves your local network.
For full details, see the DDM Deployment Guide for AWS (PDF).
Before you start
- AWS account: you deploy and pay for the EC2 instance through your own AWS account. AWS charges are separate from your DDM licence.
- DDM licence: a DDM Gold or Platinum licence from Audinate (bring your own licence).
- Operating system: Rocky Linux 9 (x86, 64-bit). This is the only Linux version supported for DDM.
- Installer: use the DDM installer script from Software Downloads. The DDM ISO generally doesn't work on AWS.
- Internet access: the instance needs internet access to activate the licence and install updates.
- High Availability: DDM can't run in High Availability (HA) mode on AWS. Only a single instance is supported, so take regular backups.
Instance size
A t3.medium instance with a General Purpose SSD (EBS) volume is generally enough for smaller systems. Size the instance for your DDM edition and number of devices:
| DDM edition | CPUs | RAM | Disk |
|---|---|---|---|
| Gold | 2 | 4 GB | 20 GB |
| Platinum | 2 | 8 GB | 20 GB |
| More than 200 devices | 3 | 16 GB recommended | 30 GB |
How will my devices connect to DDM?
- Site-to-Site VPN (strongly recommended): your on-site network and the AWS VPC act as one routed network. Devices can find DDM automatically using DNS, and you can enrol devices by IP address.
- Over the internet (UDP port 8000): devices connect out to DDM through your gateway. NAT is supported, and all traffic on this port is started by the device. You'll need to enrol devices with Dante Controller on the local network.
Which ports do I need to open?
Example AWS Security Group inbound rules. Limit the source ranges to your own networks. Public access (0.0.0.0/0) is only needed for a public-facing DDM server.
| Protocol | Port | Used for |
|---|---|---|
| TCP | 22 | SSH |
| TCP | 80 | Web interface |
| TCP | 443 | Web interface (TLS) |
| UDP | 8000 | Dante device communication |
| TCP | 8001 | Dante Controller communication |
| TCP | 8080 | Backup and crash log download |
| TCP | 8443 | Dante Controller login |
| UDP | 8702 | Device enrolment by IP address |
| ICMP | – | Ping |
How do I install DDM on AWS?
- Create an EC2 instance in your VPC running Rocky Linux 9 (x86), sized as above, with a Security Group using the ports above.
- Download the DDM installer script to the instance (for example, using
curl -Owith the download link from Software Downloads). - Run the installer with sudo, for example:
sudo bash ddm-<version>_linux_x64.sh -s -b - In a web browser, go to the instance's IP address and complete the first-time setup: choose Fresh installation (or restore a configuration), create the admin password, enter your product key, set up TLS certificates and set the FQDN.
- Go to Settings > Network & Security > Network and check that the Dante Interface matches the instance's network interface.
- Enrol your devices: automatically over the VPN with DNS, by IP address (Devices > Enrol Devices > Enrol by IP Address), or with Dante Controller (Devices > Connect devices to DDM / Dante Cloud).