Atlassian Cloud IP ranges and domains
If you're using restrictive firewall or proxy server settings, you or your network admin will need to allow (whitelist) certain domains and IP address ranges to ensure Atlassian Cloud apps and other services work as expected.
The information on this page mainly relates to Jira and Confluence, because they're hosted together on the atlassian.net domain. For info specific to our other apps, check out the section on Bitbucket, Hipchat, and Trello.
IP address ranges
We currently use a mix of our own IP addresses and others provided by third parties. You should whitelist the following IP ranges to make sure your Atlassian Cloud apps work as intended.
To accelerate file transfers going through api.media.atlassian.com, we use a technology provider that will terminate your TCP connection in the closest public cloud provider. Because of this, you may see that api.media.atlassian.com will resolve to various IPs from various public cloud provider ranges. The list of public cloud providers and the particular one you're redirected to is highly dynamic and will change over time, even based on time of day. This is to give you the best possible experience when downloading and uploading files, but also means we can't provide a fixed IP range for this service.
Atlassian Cloud sites don't have fixed individual IP addresses. The platform uses a range of IP addresses, with a reverse proxy that redirects users to the correct site. You should allow IP ranges in this list to maintain access to Atlassian Cloud products.
Amazon web services and CloudFront
We use Amazon Web Services and CloudFront CDN. To future-proof your setup, we suggest you allow everything with the service name "AMAZON" or "CLOUDFRONT" from this list.
If you can update your whitelist programmatically from the linked file, it'll save you from needing to check it regularly.
We also use Cloudflare IPs from time to time. You should allow IP ranges in this list to maintain access to Atlassian Cloud products.
We use the below IPs to send notifications. You should allow the following IP ranges:
220.127.116.11/17, 18.104.22.168/20, 22.214.171.124/19, 126.96.36.199/20, 188.8.131.52/21, 184.108.40.206/20, 220.127.116.11/17, 18.104.22.168, 22.214.171.124, 126.96.36.199, 188.8.131.52, 184.108.40.206, 220.127.116.11, 18.104.22.168, 22.214.171.124, 126.96.36.199, 188.8.131.52, 184.108.40.206, 220.127.116.11, 18.104.22.168, 22.214.171.124, 126.96.36.199, 188.8.131.52, 184.108.40.206, 220.127.116.11, 18.104.22.168, 22.214.171.124
Bitbucket, Hipchat, and Trello
Some of our apps aren't hosted on the same atlassian.net domain as Confluence and Jira. Check the documentation for Bitbucket, Hipchat, and Trello to find out which domains, IP address ranges, and ports you need to allow.