Zendesk occasionally updates its public-facing IP addresses to ensure continued reliability and stability for its customers. This article guides IT administrators on configuring your organization’s firewall for use with Zendesk, ensuring service availability during these updates.
This article includes the following topics:
- About Zendesk's IP addresses
- Customizing your IP address configurations
- Getting IP addresses for additional Zendesk products
About Zendesk's IP addresses
Zendesk has removed some AWS IP addresses from use and consolidated those public IPs to a single address range (216.198.0.0/18) that Zendesk exclusively owns.
This transition enhances network efficiency and streamlines firewall configuration for our customers by ensuring any IPs rotated in the Zendesk infrastructure are never repurposed by another entity besides Zendesk. It also ensures any necessary IP changes to protect our customers from internet outages or other service-impacting incidents wouldn't require customers to make subsequent changes to their firewall ACLs.
Customizing your IP address configurations
- Use the Zendesk IP API to retrieve your Zendesk subdomain’s inbound and outbound IP addresses: https://{your-subdomain}.zendesk.com/ips.
- Update your allowlists to include the supplied ranges.
- If your agents use any of the Zendesk products listed in Getting IP addresses for additional Zendesk products, add those IP addresses to your allowlists as well. You can find the products included in your organization’s Zendesk plan here.
Important notes
- The Zendesk IP API doesn't return retired AWS IP addresses or product-specific IP addresses. Refer to Getting IP addresses for additional Zendesk products to retrieve the complete list of Zendesk IPs required for your firewall configuration.
- Zendesk supports FQDN-based allowlists on a very limited basis. Contact Zendesk Customer Support if this is a required configuration.
Getting IP addresses for additional Zendesk products
Some Zendesk products and features require additional IP addresses in addition to Zendesk’s public IP range. Please refer to the following articles relevant to your use case.
- Zendesk Talk
- Zendesk Chat
- Zendesk Explore
- Zendesk Guide: Add uploaded-assets-*.s3.*.amazonaws.com.
- Zendesk WFM
- Zendesk QA: 34.159.180.83, 34.141.81.127
- Data importer: Add *-data-importer*.s3.*.amazonaws.com.
- Zendesk Marketplace or other pages located on www.zendesk.com - contact Zendesk Customer Support.
- Zendesk Sell
9 comments
Amit Chinchane
does zendesk provide Static IP's
0
Jason Schaeffer
At this time, Zendesk is not able to offer static IP's, as we rotate them as needed for security purposes. If you would like to know more about how you can retrieve current addresses for use in your systems, you can follow the steps in this article here to find that IP information.
Thanks!
0
Vj Gunawardana
Hi,
I am just wondering, how often the IPs are rotated?
I have to add them to our Cloudflare bypass so would be tricky if they are rotated frequently.
Thanks
0
Darenne
Unfortunately, Zendesk does not have an actual answer when IPs are rotated. We rotate them as needed rather than on any sort of set schedule. We do not offer proactive comms around changing our IPs. This endpoint (https://subdomain.zendesk.com/ips) should be updated with the quickest and most accurate information available. I hope this clarifies it!
1
Vj Gunawardana
Thanks for the heads up Darenne
0
Darenne
0
AntonMi
I've noted that webhooks are coming from the subnet below. Can we rely on it?
0
Michael Agius Muscat
Hello,
I have used the https://{our-subdomain}.zendesk.com/ips method to list the main Zendesk ingress and egress IP addresses.
Could you please clarify if these IP addresses are used exclusively for our subdomain, or if they are shared with other Zendesk customers' subdomains?
Thank you and regards!
0
Tim Berry
When is IPv6 support planned to be added?
I posted this need for IPv6 due to a Federal Mandate:
https://support.zendesk.com/hc/en-us/community/posts/7426156855322-IPv6-Support-for-upcoming-Federal-Mandate
We have regulatory obligations from our federal customers to offer IPv6 on our domains.
0