When integrating your infrastructure with Infisical Cloud, you may need to configure network access controls. This page provides the IP addresses that Infisical uses to communicate with your services.
Infisical IP addresses
Infisical Cloud operates from multiple regions. If your infrastructure has strict network policies, you may need to allow traffic from Infisical by adding the following IP addresses to your ingress rules. These are the IP addresses that Infisical uses when making outbound requests to your services.
US Region
EU Region
Dedicated Cloud
For dedicated Infisical deployments, please contact your account manager for the specific IP addresses used in your dedicated environment.
These IP addresses are static and managed by Infisical. Any changes will be communicated with 60-day advance notice.
What connects from these addresses
Anything Infisical Cloud reaches over the internet: app connections, dynamic secrets, secret rotation, and secret syncs. Allowing these addresses is what lets those features reach a target that would otherwise refuse the connection.
Features that run work on your side of the network need a gateway instead, and allowing these addresses does nothing for them. That covers PAM sessions, HSM, ADCS, and discovery. 
