Typically customers' internal networks have specific security standards, and in the event https://dashboard.envoy.com has issues resolving. Envoy requires allow-listing the following domains if your firewall is strict.

For additional security, you can whitelist the hostnames from Envoy and the third-party services we rely on.

“Allowing traffic” means that a customer has gone into their network systems and whitelisted our IP addresses to allow traffic from us to travel to them. If applicable, your network team may have set up some firewall rules for Envoy to communicate with them. We recently updated our IP addresses 09/2022, and these IP addresses will need to communicate with the same port(s), and any previously allow-listed IP addresses from Envoy are allowed. We recommend adding the new IPs to the old IPs:

These are the generic IPs used by Envoy's services, including most active apps.

These are the limited IPs that a handful of active apps use to proxy traffic. The IPs are specified in each app configuration.

*Please do not remove old IPs unless specified by your account team.

*Access control configuration within Envoy is the source of truth for IPs to allow.