+ Start a Discussion
MattAustinMattAustin 

What is Salesforce IP address range?

I am writing some APEX callouts to call webservice on our company network,  I want to restrict access to these webservice only allow the Salesforce IP address, but I can't find the IP address ranges I should use.  Can anyone help me?
 
Thanks
Ron HessRon Hess
from online help
search for ip whitelist


Salesforce.com moved from an IP address block sub-allocated by an ISP to a new address block allocated directly to salesforce.com by the American Registry for Internet Numbers (ARIN).

Salesforce.com strives to provide our customers with the best service possible. The MirrorForce data centers installations on the East and West Coast provide near real-time data replication and failover. Direct IP allocations make that possible.

In addition, direct IP allocations provide for:

-ISP Peering: The ability to select diverse peering to avoid congested networks.

-ISP Redundancy: The ability to easily expand beyond two network carriers

-IP Stability: The ability to maintain the same IP addresses with different network carriers.

The IP address spaces are as follows:

204.14.232.0/25 East Coast Data Center (set one)
204.14.233.0/25 East Coast Data Center (set two)
204.14.234.0/25 West Coast Data Center (set one)
204.14.235.0/25 West Coast Data Center (set two)

To clarify, the "0/25" that you see in the ranges does not refer to "0 - 25" or 26 IP addresses. It is network administration nomenclature which refers to the range of IP addresses from "0 - 127", so there is a total of 512 IP addresses.
CarlBCarlB

What are the address ranges for Europe?

 

Thanks,

 

Carl

 

hamayoun65hamayoun65

Ron,

 

Thank you very much for posting this, we have been looking for this info for a while, in order to see which IP addresses to open in our firewall.  On that note, shouldn't this be posted somewhere publically?  I am sure that there are many cirucmstances in which this info is needed. 

SuperfellSuperfell
As Ron noted, its in the online help.
hamayoun65hamayoun65
Yes, I just saw that, apologies!
SidMSidM
Ron - would be good if we could get the IP whitelist for Europe as well please? Can't seem to find it in the online help or anywhere else.
SFWorkerDroneSFWorkerDrone
Second the request for updated IP whitelist.  I'm seeing urls that resolve to ips not included in the ranges outlined on the help page.  ap1.salesforce.com and c.ap1.visual.force.com resolve to 202.129.242.32 and 202.129.242.34, respectively.
cweisscweiss

Please see the updated IP blocks from https://help.salesforce.com/apex/HTViewSolution?id=103417&language=en (a salesforce login is required)

 

Currently the IP address spaces are as follows:
204.14.232.0/23 East Coast Data Center (set one)
204.14.237.0/24 East Coast Data Center (set two)
96.43.144.0/22  MidWest Data Centers
96.43.148.0/22  MidWest Data Centers
204.14.234.0/23 West Coast Data Center (set one)
204.14.238.0/23 West Coast Data Center (set two)
202.129.242.0/23 Singapore Data Center

gwestrgwestr
raykarayka

I have seen this list that you are providing in a number of place including https://help.salesforce.com/apex/HTViewSolution?language=en_US&id=000003652 which is a knowlegde article:

 

204.14.232.0/23 East Coast Data Center (set one)

204.14.237.0/24 East Coast Data Center (set two)

96.43.144.0/22  MidWest Data Centers 96.43.148.0/22

MidWest Data Centers 204.14.234.0/23 West Coast Data Center (set one)

204.14.238.0/23 West Coast Data Center (set two)

182.50.76.0/22  Japan Data Center

 

However when we ping to the url of the webservice (login.salesforce.com) we see replies from addresses not on this list like

204.14.235.101 or 204.14.233.101?

 

Could someone explain that for me please.  Thx!

armen-intecharmen-intech

The specific IP addresses you mentioned are in fact within the ranges on the list. What makes things less obvious is the /23, which is two sequential /24 addresses.

 

The linked article (https://help.salesforce.com/apex/HTViewSolution?id=000003652) summarises this relatively uncommon (and entirely valid) representation.

 

204.14.235.101 is within the 204.13.234.0/23 range as it is a combination of  204.13.234.0/24 and 204.13.235.0/24.

204.14.233.101 is within the 204.14.232.0/23 range (204.14.232.0/25 and 204.14.233.0/24 when subdivided).

 

Below text was taken verbatim from the article:

To clarify, the "0/24" that you see in the ranges refers to an abbreviated form of Classless Inter-domain routing (CIDR) notation. In essence this notation is a network number followed by a "/" and a number , the latter number indicates the number of 1's (starting a the left most bit i.e MSB - most significant bit) in the subnet mask i.e the number of bits relevant to a network portion of the IP address. So "/25" means 25 bits constitute the subnet mask of 255.255.255.128, and really 25 bits reserved for network address which is identified by performing bitwise "AND" to the full network number.

For example 204.14.232.0/24 represents a Class C network in the form of 204.14.232.0 to 204.14.232.255 containing a possible 256 IP addresses and a total 254 hosts or IP addresses per specified range.

/22 is 1024 addresses (4 class C ranges)

/23 is 512 addresses (2 class C ranges)

 

 

for the record, the link in the older post in this thread is broken. Use the newer one instead.

trictric
Hi Ron and others, We have webservice hosted on the company server and we are calling it from Salesfore.In order to ensure that only Salesforce can access web service we are planing to configure IP addresses on the firewall on the company's network .Do we need to install those IP addresses in Salesforce as well or only on the server hosting web service. Thanks, Trick
SFDC HedgehogSFDC Hedgehog

Can someone please post the IP address ranges of the sandboxes, too?
 

Thanks
 

Dennis NoordzijDennis Noordzij
@Salesforce, please provide a decent JSON or XML endpoint with these ranges, like AWS does: 
https://ip-ranges.amazonaws.com/ip-ranges.json

Thanks!