Networks

This list is current. Last updated 22 September 2015.

This is a list of the IP addresses used by New Relic collectors (for example, https://collector.newrelic.com) for communicating with the New Relic agent installed on your server.

Agents

To enhance network performance and security, New Relic uses a CDN and DDoS prevention service with a large IP range. New Relic agents require your firewall to allow outgoing connections to the following networks and ports:

Networks

  • 50.31.164.0/24
  • 162.247.240.0/22

Ports

  • TCP 80
  • TCP 443

The following ranges are not currently used, but may be in the future. At present you do not need to allow outgoing connections to them.

Proposed

  • 104.16.0.0/12
  • 198.41.128.0/17

Agent downloads

Service for download.newrelic.com is provided through Fastly and is subject to change without warning. For the most current list of public IP addresses for New Relic agent downloads, see https://api.fastly.com/public-ip-list.

Infrastructure agents

In order to report data to New Relic, Infrastructure must have outbound access to these domains and ports:

  • Domain: infra-api.newrelic.com
  • Port: 443
  • Domain+Port: infra-api.newrelic.com:443

If your system needs a proxy to connect to these domains, use the proxy setting.

Static IP addresses

For environments that require a static set of IP addresses for firewall rules, New Relic provides an alternative collection endpoint. You can configure it by adding the following line to your /etc/newrelic-infra.yml file:

collector_url: https://static-infra-api.newrelic.com

You can then whitelist the following IP/port pairs:

  • 34.195.205.25:443
  • 34.195.205.103:443

Browser domains

In addition to the agent IP addresses, New Relic Browser applications use outgoing connections to the following domains:

  • bam.nr-data.net
  • js-agent.newrelic.com

Mobile domains

In addition to the IP addresses above, New Relic Mobile applications use outgoing connections to the following domains:

  • mobile-collector.newrelic.com
  • mobile-crash.newrelic.com
  • mobile-symbol-upload.newrelic.com

Synthetics public locations

To configure your firewall to allow New Relic Synthetics to access your monitored URL, use Synthetics public minion IPs.

Synthetics private locations

Synthetics private minions report to https://synthetics-horde.nr-data.net/. You'll need to configure your firewall to allow the minion to access this endpoint. This endpoint is dynamic.

Availability monitoring IP addresses

If you want to configure your firewall to allow New Relic to access your monitoring URL, whitelist the following origin IP addresses for the availability monitoring pingers. The region names also appear in the New Relic user interface.

These ranges do not apply to New Relic Synthetics.

IP address Region name Location
50.31.164.139 Chicago Illinois
50.112.95.211 US West 2 Oregon
54.247.188.179 EU West 1 Ireland
54.248.250.232 AP Northeast 1 Japan
54.251.34.67 AP Southeast 1 Singapore
184.73.237.85 US East 1 Virginia

The following IP addresses are currently reserved for future availability monitoring use. Whitelist them for forward compatibility.

IP address Region name Location
50.16.189.130 US East 1 Virginia
50.18.57.7 US West 1 California
54.214.255.205 US West 2 Oregon
54.228.244.177 EU West 1 Ireland
54.232.123.139 SA East 1 Brazil
54.241.22.142 US West 1 California
54.248.225.67 AP Northeast 1 Tokyo
54.251.109.246 AP Southeast 1 Singapore
54.252.114.169 AP Southeast 2 Sydney
54.252.114.170 AP Southeast 2 Sydney
177.71.245.207 SA East 1 Brazil

Webhook alerts

New Relic-generated webhooks for alert policies will be sent from an IP address in the 50.31.164.0/24 or 162.247.240.0/22 network block.

For more help

Additional documentation resources include:

  • Security and Data security (overview of New Relic's security policies, including data collection, transmission, storage, and proxies)
  • Security for New Relic Browser (overview of New Relic Browser's security measures, including CDN access for the js-agent.newrelic.com file to the domain bam.nr-data.net or to one of the New Relic beacons)

Join the discussion about New Relic APM in the New Relic Online Technical Community! The Technical Community is a public platform to discuss and troubleshoot your New Relic toolset.

If you need additional help, get support at support.newrelic.com.