--- title: Fliplet URLs and IP addresses description: "Domains and ports that Fliplet Studio, web apps, native apps, and the Data Integration Service need reachable through a corporate firewall." type: reference tags: [urls, addresses] v3_relevant: true deprecated: false --- # Fliplet URLs and IP addresses Domains and ports that Fliplet Studio, web apps, native apps, and the Data Integration Service need reachable through a corporate firewall.

Fliplet does not suggest whitelisting a set of static IP addresses to allow traffic for an app.

In order to optimize the network path between an end user and a Fliplet app, end users on different ISPs or geographic locations might use different IP addresses to access the same Fliplet app. DNS might return different IP addresses to access a Fliplet App over time or from different network locations. Note that using static IP address filtering is not considered a safe and effective means of protection. For example, an attacker could set up a malicious Fliplet app which could share the same IP address range as your app. Instead, we suggest that you take a [defense in depth](https://en.wikipedia.org/wiki/Defense_in_depth_(computing)) approach using Single-Sign-On (e.g. SAML2). In regards to ports, you must allow traffic for **TCP ports 80 and 443**. ## URL-based whitelisting ### URLs for all Fliplet Services Fliplet Studio, Fliplet Web and Native apps as well as Fliplet Agent (Data Integration Service) make use of the following URLs: - `api.fliplet.com` - `cdn.fliplet.com` - `cdn.api.fliplet.com` **US customers** will also need to whitelist the following domains: - `us.api.fliplet.com` - `us.cdn.fliplet.com` - `us.cdn.api.fliplet.com` **Canadian customers** will also need to whitelist the following domains: - `ca.api.fliplet.com` - `ca.cdn.fliplet.com` - `ca.cdn.api.fliplet.com` --- ### Additional URLs for Fliplet webapps - `apps.fliplet.com` **US customers** will also need to whitelist the following domain: - `us-apps.fliplet.com` **Canadian customers** will also need to whitelist the following domain: - `ca-apps.fliplet.com` --- ### Additional URLs for Fliplet Studio - `studio.fliplet.com` --- ## IP-based whitelisting

URL-based whitelisting is strongly recommended over IP-based whitelisting. Fliplet services are fronted by CloudFront (AWS CDN), which means the IP addresses that api.fliplet.com, cdn.fliplet.com and other domains resolve to will change over time. Static IP filtering for inbound access to Fliplet services is inherently unreliable.

If your network policy requires IP-based rules, the following AWS S3 CIDR ranges cover access to Fliplet CDN assets. Note that these are shared AWS ranges, not exclusive to Fliplet: ### S3/CDN ranges for European customers ``` 52.218.0.0/17 52.92.40.0/21 54.231.128.0/19 18.200.212.0/23 52.212.248.0/26 3.249.28.0/23 52.19.124.0/23 ``` ### Additional S3/CDN ranges for US customers ``` 52.219.20.0/22 52.219.24.0/21 52.92.48.0/22 54.231.232.0/21 52.219.120.0/22 52.219.112.0/21 52.52.191.128/26 ``` ### Additional S3/CDN ranges for Canadian customers ``` 143.204.170.71/32 143.204.170.36/32 143.204.170.28/32 143.204.170.122/32 ``` --- ## Static outbound IPs Fliplet servers use the following static IP addresses when making **outbound** requests to external services. This includes OAuth2 token exchanges, App Actions webhook deliveries, and any server-to-server API calls initiated by Fliplet on behalf of your app. These IPs are static and will not change without prior notice. If you need to whitelist inbound traffic from Fliplet to your infrastructure, use these addresses. ### European customers ``` 34.253.89.200 52.212.7.119 ``` ### US customers ``` 54.215.18.140 54.151.38.62 ``` ### Canadian customers ``` 52.60.161.244 3.98.9.146 ``` --- ### Additional domains and IPs for emails sent by Fliplet Studio and Apps If you need to whitelist inbound emails to your infrastructure received from system@fliplet.com, please consider whitelisting the following domains: - Canadian customers: `ca.email.fliplet.com` and `ca-alt1.email.fliplet.com` - European customers: `eu.email.fliplet.com` and `eu-alt1.email.fliplet.com` - US customers: `us.email.fliplet.com` and `us-alt1.email.fliplet.com` Additionally, if you need to whitelist emails by IP please add the following IP address ranges: ``` 199.255.192.0/22 199.127.232.0/22 54.240.0.0/18 69.169.224.0/20 23.249.208.0/20 23.251.224.0/19 76.223.176.0/20 54.240.64.0/19 54.240.96.0/19 52.82.172.0/22 76.223.128.0/19 ```

Please note that the list of IP addresses above is not used exclusively by Fliplet. Amazon SES is our trusted cloud email provider, which uses the ranges above for transactional emails sent by all its customers.

Keep in mind that those IP addresses are subject to change and be added over time. If Amazon SES adds or removes any outgoing IP address, we will update the SPF record, so you need to check back from time to time, if you want to make sure you have the latest list of IP address ranges. You can use the `dig` unix command to get an up to date list of our SPF records at any time: ``` $ dig TXT amazonses.com +short| grep 'v=spf1' ``` Here's the equivalent query (and result) using the Windows command prompt: ``` C:>nslookup -type=TXT amazonses.com | find "v=spf1" ``` ---