Atlassian cloud IP ranges and domains
If you're using restrictive firewall or proxy server settings, you or your network admin will need to allow (whitelist) certain domains and IP address ranges to ensure Atlassian cloud products and other services work as expected.
The information on this page mainly relates to Jira and Confluence, because they're hosted together on the atlassian.net domain. For info specific to our other apps, check out the section on Bitbucket and Trello.
IP address ranges
We currently use a mix of our own IP addresses and others provided by third parties. You should whitelist the following IP ranges to make sure your Atlassian cloud products work as intended.
Atlassian sites
Atlassian sites don't have fixed individual IP addresses. The platform uses a range of IP addresses, with a reverse proxy that redirects users to the correct site. You should allow IP ranges in this list to maintain access to Atlassian cloud products.
Amazon web services and CloudFront
We use Amazon Web Services and CloudFront CDN. To future-proof your setup, we suggest you allow everything with the service name "AMAZON" or "CLOUDFRONT" from this list.
If you can update your whitelist programmatically from the linked file, it'll save you from needing to check it regularly.
Cloudflare
We also use Cloudflare IPs from time to time. You should allow IP ranges in this list to maintain access to Atlassian cloud products.
Outbound email
We use the below IPs to send notifications. You should allow the following IP ranges:
167.89.0.0/17, 192.174.80.0/20, 147.253.208.0/20, 168.245.0.0/17, 34.211.27.137, 34.211.27.236, 34.213.22.229, 34.249.70.175, 34.251.56.38, 34.252.236.245, 52.51.22.205, 54.187.228.111, 34.209.119.136, 34.211.27.82, 34.212.5.76, 34.253.110.0, 34.253.57.155, 35.167.157.209, 35.167.7.36, 52.19.227.102, 52.24.176.31, 54.72.208.111, 54.72.24.111, 54.77.2.231Bitbucket and Trello
Some of our apps aren't hosted on the same atlassian.net domain as Confluence and Jira. Check the documentation for Bitbucket and Trello to find out which domains, IP address ranges, and ports you need to allow.