To ensure complete access to the CloudBees Unify your network configuration must allow communication between your infrastructure and CloudBees servers. In general, this is just outbound requests your systems make to CloudBees. For some optional features (such as webhook notifications) you may also need to allow inbound traffic to your network.
This document describes all required domains and gateway source IP addresses that must be added to the allowlist to ensure reliable service functionality.
Required allowlist domains
To ensure proper functioning of CloudBees Unify, the indicated domains on this page should be added to the allowlist for outbound traffic through your firewall. These domains cover core services such as:
-
Authentication
-
SDK communication for feature management
-
Configuration retrieval
-
Analytics
| Companies with locked-down environments may need to update their allowlist to avoid connectivity issues. |
CloudBees Unify common URLs
Multiple CloudBees Unify capabilities use the following URLs:
-
Accesses the CloudBees Unify user interface (UI) via a web browser. This is the main entry point for logging in, navigating the dashboard, managing features, and using other platform capabilities.
https://cloudbees.io -
Handles API requests across many platform services.
https://api.cloudbees.io
Feature management URLs
The domains listed below are used specifically by feature management SDKs for flag evaluation, targeting, and analytics. They must be added to the allowlist for SDKs to evaluate and deliver feature flags correctly.
-
Retrieves the latest state of feature flags and customer properties.
https://rox-state.cloudbees.io -
Retrieves configuration and targeting rules.
https://rox-conf.cloudbees.io -
Sends flag usage and analytics data to the feature management dashboard.
https://fm-analytics.cloudbees.io -
Supports Server-Sent Events (SSE) used by the SDK to receive live updates when flag configurations change. No special firewall rules are required beyond general allowlisting.
https://sdk-notification-service.cloudbees.io/sse
Gateway IP addresses for inbound communication
Some features of CloudBees Unify, such as webhook notifications, initiate requests from CloudBees infrastructure to customer systems. Customers in locked-down environments may need to allow traffic from specific egress/source IP addresses to receive these communications.