Keep your allowlist of VTEX IP addresses up to date
If you restrict access to your endpoints by IP address, periodically update your allowlist with the addresses published at ips.vtex.com to keep receiving requests from VTEX.
If your endpoints only accept requests from specific IP addresses, keeping your allowlist up to date is an ongoing task on your side. VTEX publishes the IP addresses it uses to send requests to your endpoints at ips.vtex.com, and that list is the reference your allowlist should follow.
What needs to be done?
From time to time, compare the allowlist configured in your firewall, security group, or application with the addresses at ips.vtex.com, and add any missing addresses on your side.
We recommend making this review part of your regular maintenance routine so that integrations in which VTEX sends requests to endpoints you provide keep working as expected. Examples include:
- Orders Hook, which notifies your endpoint about order updates.
- Orders Broadcast, which sends order status notifications to a listener you configure.
If you don't restrict requests from VTEX by IP address, no action is needed.