To ensure complete access to the CloudBees platform your network configuration must allow communication between your infrastructure and CloudBees servers. In general, this is just outbound requests your systems make to CloudBees. For some optional features (such as webhook notifications) you may also need to allow inbound traffic to your network.
This document describes all required domains and gateway source IP addresses that must be added to the allowlist to ensure reliable service functionality.
Required allowlist domains
To ensure proper functioning of CloudBees platform, the indicated domains on this page should be added to the allowlist for outbound traffic through your firewall. These domains cover core services such as:
-
Authentication
-
SDK communication for feature management
-
Configuration retrieval
-
Analytics
| Companies with locked-down environments may need to update their allowlist to avoid connectivity issues. |
CloudBees platform common URLs
Multiple CloudBees platform capabilities use the following URLs:
-
Accesses the CloudBees platform user interface (UI) via a web browser. This is the main entry point for logging in, navigating the dashboard, managing features, and using other platform capabilities.
https://cloudbees.io -
Handles API requests across many platform services.
https://api.cloudbees.io
Feature management URLs
The domains listed below are used specifically by feature management SDKs for flag evaluation, targeting, and analytics. They must be added to the allowlist for SDKs to evaluate and deliver feature flags correctly.
-
Retrieves the latest state of feature flags and customer properties.
https://rox-state.cloudbees.io -
Retrieves configuration and targeting rules.
https://rox-conf.cloudbees.io -
Sends flag usage and analytics data to the feature management dashboard.
https://fm-analytics.cloudbees.io -
Supports Server-Sent Events (SSE) used by the SDK to receive live updates when flag configurations change. No special firewall rules are required beyond general allowlisting.
https://sdk-notification-service.cloudbees.io/sse
Gateway IP addresses for inbound communication
Some features of CloudBees platform, such as webhook notifications, initiate requests from CloudBees infrastructure to customer systems. Customers in locked-down environments may need to allow traffic from specific IP ranges to receive these communications.
The following are the source IP addresses of outbound traffic from CloudBees: