Networks

This list is current. Last updated 2 October 2017.

This is a list of the IP addresses and domains used by New Relic collectors (for example, https://collector.newrelic.com) for communicating with the New Relic agent installed on your server.

APM agents

To enhance network performance and data security, New Relic uses a CDN and DDoS prevention service with a large IP range. New Relic agents require your firewall to allow outgoing connections to the following networks and ports:

Networks

  • 50.31.164.0/24
  • 162.247.240.0/22

Ports

  • TCP 80
  • TCP 443

Agent downloads

Service for download.newrelic.com is provided through Fastly and is subject to change without warning. For the most current list of public IP addresses for New Relic agent downloads, see https://api.fastly.com/public-ip-list.

Infrastructure agents

In order to report data to New Relic, Infrastructure needs outbound access to these domains, networks and ports:

  • Domain: infra-api.newrelic.com
  • Networks
    • 50.31.164.0/24
    • 162.247.240.0/22
  • Port: 443
  • Domain+Port: infra-api.newrelic.com:443

If your system needs a proxy to connect to this domain, use the proxy setting.

The static ingest endpoint (https://static-infra-api.newrelic.com) will be deprovisioned on May 29th, 2018.

Browser domains

In addition to the IP addresses for APM agents, New Relic Browser applications use outgoing connections to the following domains:

  • bam.nr-data.net
  • js-agent.newrelic.com

For more information about CDN access for the js-agent.newrelic.com file to the domain bam.nr-data.net or to one of the New Relic beacons, see Security for New Relic Browser.

Mobile domains

In addition to the IP addresses for APM agents, New Relic Mobile applications use outgoing connections to the following domains:

  • mobile-collector.newrelic.com
  • mobile-crash.newrelic.com
  • mobile-symbol-upload.newrelic.com

Synthetics public locations

To configure your firewall to allow New Relic Synthetics to access your monitored URL, use Synthetics public minion IPs.

Synthetics private locations

Synthetics private minions report to https://synthetics-horde.nr-data.net/. You'll need to configure your firewall to allow the minion to access this endpoint. This endpoint is dynamic.

Ticketing integrations and webhook alerts

Third-party ticketing integrations and New Relic-generated webhooks for alert policies will be sent from an IP address in the 50.31.164.0/24 or 162.247.240.0/22 network block.

Availability monitoring IP addresses (deprecated)

Availability monitoring was part of New Relic's legacy alerting system. For enhanced monitoring capabilities, use New Relic Alerts.

Origin IP addresses for legacy availability monitoring

DEPRECATED

If you want to configure your firewall to allow New Relic to access your monitoring URL, whitelist the following origin IP addresses for the availability monitoring pingers. The region names also appear in the New Relic user interface. These ranges do not apply to alerts for New Relic Synthetics or "host not reporting" alerts from New Relic Infrastructure.

IP address Region name Location
50.31.164.139 Chicago Illinois
50.112.95.211 US West 2 Oregon
54.247.188.179 EU West 1 Ireland
54.248.250.232 AP Northeast 1 Japan
54.251.34.67 AP Southeast 1 Singapore
184.73.237.85 US East 1 Virginia
Reserved IP addresses for legacy availability monitoring

DEPRECATED

The following IP addresses are currently reserved for future availability monitoring use. Whitelist them for forward compatibility.

IP address Region name Location
50.16.189.130 US East 1 Virginia
50.18.57.7 US West 1 California
54.214.255.205 US West 2 Oregon
54.228.244.177 EU West 1 Ireland
54.232.123.139 SA East 1 Brazil
54.241.22.142 US West 1 California
54.248.225.67 AP Northeast 1 Tokyo
54.251.109.246 AP Southeast 1 Singapore
54.252.114.169 AP Southeast 2 Sydney
54.252.114.170 AP Southeast 2 Sydney
177.71.245.207 SA East 1 Brazil

For more help

Recommendations for learning more: