mirror of
https://github.com/gravitational/teleport.git
synced 2026-11-03 16:38:35 +08:00
64 lines
2.0 KiB
Plaintext
64 lines
2.0 KiB
Plaintext
---
|
|
title: Public IP Address Allowlist
|
|
description: Restrict outbound network connections from your infrastructure to cloud-hosted Teleport Enterprise.
|
|
tocDepth: 3
|
|
---
|
|
|
|
Teleport Agents connected to cloud-hosted Teleport Enterprise clusters must be allowed to connect to the following IP addresses in order to join the Teleport cluster.
|
|
|
|
```
|
|
3.7.23.103/32
|
|
3.25.41.182/32
|
|
3.67.31.207/32
|
|
3.107.217.118/32
|
|
3.109.188.166/32
|
|
13.215.3.254/32
|
|
13.239.68.188/32
|
|
18.136.170.204/32
|
|
18.197.230.105/32
|
|
18.228.73.158/32
|
|
35.82.240.238/32
|
|
44.198.252.22/32
|
|
44.213.172.215/32
|
|
44.217.250.22/32
|
|
50.112.183.104/32
|
|
52.59.15.95/32
|
|
52.66.6.236/32
|
|
52.67.142.215/32
|
|
52.220.247.39/32
|
|
54.94.211.77/32
|
|
54.185.13.106/32
|
|
```
|
|
|
|
This list may be used to allowlist outbound network connections from Teleport Agents to cloud-hosted Teleport Enterprise.
|
|
|
|
Allowlisting these IPs is not a required or recommended configuration for Teleport Agents, but it may be useful in environments that require restrictions to outbound network connections.
|
|
For example, this list may be used to configure firewalls that sit in front of Teleport Agents, when those firewalls block access to the public internet by default.
|
|
|
|
<Admonition type="warning">
|
|
Note that IP addresses may be added or removed from the above list over time.
|
|
</Admonition>
|
|
|
|
When this list is modified, we will provide at least two weeks notice by:
|
|
1. Updating the Changelog below.
|
|
1. Notifying cloud-hosted Teleport Enterprise customers via email.
|
|
1. Providing a [Status Page](https://status.teleport.sh/) update.
|
|
1. Reaching out directly to Enterprise customers that have requested advanced notice.
|
|
|
|
<Admonition type="warning">
|
|
If you are Teleport Enterprise customer and plan to employ this allowlist, please let us know by opening a support ticket.
|
|
</Admonition>
|
|
|
|
Additionally, to receive Teleport Agent updates, nodes must be able to reach the following domains via HTTPS during the update.
|
|
|
|
```
|
|
apt.releases.teleport.dev
|
|
yum.releases.teleport.dev
|
|
cdn.teleport.dev
|
|
```
|
|
|
|
## Changelog
|
|
|
|
- 2025-04-07: Add new IPs
|
|
- 2024-06-06: List published
|