Fliplet URLs and IP Addresses

Fliplet URLs and IP Addresses

Fliplet Studio, Fliplet Web Apps and Fliplet Agent (Data Integration Service) requires connectivity to the Internet. Fliplet Apps also require connectivity in order to get app updates and communicate with our systems. The endpoints below should be reachable for customers using our services behind a company firewall.

Fliplet does not suggest whitelisting a set of static IP addresses to allow traffic for an app.

In order to optimize the network path between an end user and a Fliplet app, end users on different ISPs or geographic locations might use different IP addresses to access the same Fliplet app. DNS might return different IP addresses to access a Fliplet App over time or from different network locations.

Note that using static IP address filtering is not considered a safe and effective means of protection. For example, an attacker could set up a malicious Fliplet app which could share the same IP address range as your app. Instead, we suggest that you take a defense in depth approach using Single-Sign-On (e.g. SAML2).

In regards to ports, you must allow traffic for TCP ports 80 and 443.

URL-based whitelisting

URLs for all Fliplet Services

Fliplet Studio, Fliplet Web and Native apps as well as Fliplet Agent (Data Integration Service) make use of the following URLs:

  • api.fliplet.com
  • cdn.fliplet.com
  • cdn.api.fliplet.com

US customers will also need to whitelist the following domains:

  • us.api.fliplet.com
  • us.cdn.fliplet.com
  • us.cdn.api.fliplet.com

Canadian customers will also need to whitelist the following domains:

  • ca.api.fliplet.com
  • ca.cdn.fliplet.com
  • ca.cdn.api.fliplet.com

Additional URLs for Fliplet webapps

  • apps.fliplet.com

US customers will also need to whitelist the following domain:

  • us-apps.fliplet.com

Canadian customers will also need to whitelist the following domain:

  • ca-apps.fliplet.com

Additional URLs for Fliplet Studio

  • studio.fliplet.com

IP-based whitelisting

URL-based whitelisting is strongly recommended over IP-based whitelisting. Fliplet services are fronted by CloudFront (AWS CDN), which means the IP addresses that api.fliplet.com, cdn.fliplet.com and other domains resolve to will change over time. Static IP filtering for inbound access to Fliplet services is inherently unreliable.

If your network policy requires IP-based rules, the following AWS S3 CIDR ranges cover access to Fliplet CDN assets. Note that these are shared AWS ranges, not exclusive to Fliplet:

S3/CDN ranges for European customers

52.218.0.0/17
52.92.40.0/21
54.231.128.0/19
18.200.212.0/23
52.212.248.0/26
3.249.28.0/23
52.19.124.0/23

Additional S3/CDN ranges for US customers

52.219.20.0/22
52.219.24.0/21
52.92.48.0/22
54.231.232.0/21
52.219.120.0/22
52.219.112.0/21
52.52.191.128/26

Additional S3/CDN ranges for Canadian customers

143.204.170.71/32
143.204.170.36/32
143.204.170.28/32
143.204.170.122/32

Static outbound IPs

Fliplet servers use the following static IP addresses when making outbound requests to external services. This includes OAuth2 token exchanges, App Actions webhook deliveries, and any server-to-server API calls initiated by Fliplet on behalf of your app.

These IPs are static and will not change without prior notice. If you need to whitelist inbound traffic from Fliplet to your infrastructure, use these addresses.

European customers

34.253.89.200
52.212.7.119

US customers

54.215.18.140
54.151.38.62

Canadian customers

52.60.161.244
3.98.9.146

Additional domains and IPs for emails sent by Fliplet Studio and Apps

If you need to whitelist inbound emails to your infrastructure received from system@fliplet.com, please consider whitelisting the following domains:

  • Canadian customers: ca.email.fliplet.com and ca-alt1.email.fliplet.com
  • European customers: eu.email.fliplet.com and eu-alt1.email.fliplet.com
  • US customers: us.email.fliplet.com and us-alt1.email.fliplet.com

Additionally, if you need to whitelist emails by IP please add the following IP address ranges:

199.255.192.0/22
199.127.232.0/22
54.240.0.0/18
69.169.224.0/20
23.249.208.0/20
23.251.224.0/19
76.223.176.0/20
54.240.64.0/19
54.240.96.0/19
52.82.172.0/22
76.223.128.0/19

Please note that the list of IP addresses above is not used exclusively by Fliplet. Amazon SES is our trusted cloud email provider, which uses the ranges above for transactional emails sent by all its customers.

Keep in mind that those IP addresses are subject to change and be added over time. If Amazon SES adds or removes any outgoing IP address, we will update the SPF record, so you need to check back from time to time, if you want to make sure you have the latest list of IP address ranges.

You can use the dig unix command to get an up to date list of our SPF records at any time:

$ dig TXT amazonses.com +short| grep 'v=spf1'

Here’s the equivalent query (and result) using the Windows command prompt:

C:>nslookup -type=TXT amazonses.com | find "v=spf1"