Networks

This list is current. Last updated 13 March 2019.

This is a list of the IP addresses and domains used by New Relic collectors (for example, https://collector.newrelic.com) for communicating with the New Relic agent installed on your server.

APM agents

To enhance network performance and data security, New Relic uses a CDN and DDoS prevention service with a large IP range. New Relic agents require your firewall to allow outgoing connections to the following networks and ports:

Networks

For U.S. region accounts:

  • 50.31.164.0/24
  • 162.247.240.0/22

For EU region accounts:

  • 185.221.84.0/22

Ports

  • TCP 80
  • TCP 443

Endpoints​​

For U.S. region accounts:

  • collector*.newrelic.com

For EU region accounts:

  • collector*.eu01.nr-data.net:443

New Relic recommends that you use port 443, a secured channel for encrypted HTTPS traffic. Some agents also offer port 80, an unsecured channel open to all HTTP traffic.

While some agents can be configured to use both port 80 and port 443, New Relic recommends that you choose the default of port 443. An existing configuration which is configured to use port 80 can be updated to use port 443, the default New Relic connection.

Agent downloads

Service for download.newrelic.com is provided through Fastly and is subject to change without warning. For the most current list of public IP addresses for New Relic agent downloads, see https://api.fastly.com/public-ip-list.

Infrastructure agents

In order to report data to New Relic, Infrastructure needs outbound access to these domains, networks and ports:

  • Domain: infra-api.newrelic.com
  • Networks

    For U.S. region accounts:

    • 50.31.164.0/24
    • 162.247.240.0/22

    For EU region accounts:

    • 185.221.84.0/22
  • Port: 443
  • Domain+Port: infra-api.newrelic.com:443 for U.S. accounts, infra-api.eu01.nr-data.net:443 for EU accounts.

If your system needs a proxy to connect to this domain, use the proxy setting.

Browser domains

In addition to the IP addresses for APM agents, New Relic Browser applications use outgoing connections to the following domains.

For U.S. region accounts:

  • bam.nr-data.net
  • js-agent.newrelic.com

For EU region accounts:

  • eu01.nr-data.net
  • bam.eu01.nr-data.net​

For more information about CDN access for the js-agent.newrelic.com file to the domain bam.nr-data.net or to one of the New Relic beacons, see Security for New Relic Browser.

Mobile domains

In addition to the IP addresses for APM agents, New Relic Mobile applications use outgoing connections to the following domains.

For U.S. region accounts:

  • mobile-collector.newrelic.com
  • mobile-crash.newrelic.com
  • mobile-symbol-upload.newrelic.com

For EU region accounts:

  • mobile-collector.eu01.nr-data.net
  • mobile-crash.eu01.nr-data.net
  • mobile-symbol-upload.eu01.nr-data.net

Synthetics public locations

To configure your firewall to allow New Relic Synthetics to access your monitored URL, use Synthetics public minion IPs.

Synthetics private locations

Synthetics private minions report to https://synthetics-horde.nr-data.net/. You'll need to configure your firewall to allow the minion to access this endpoint or the static IP addresses associated with this endpoint (these IP addresses may change in the future).

IP addresses:

  • 13.248.153.51
  • 76.223.21.185

Ticketing integrations and webhook alerts

Third-party ticketing integrations and New Relic-generated webhooks for alert policies will be sent from an IP address in the 50.31.164.0/24 or 162.247.240.0/22 network block.

For more help

Recommendations for learning more: