FedRAMP-compliant endpoints

This document provides information on FedRAMP-compliant endpoints in New Relic. For more information about our security accreditation for the Federal Risk and Authorization Management Program (FedRAMP), see our data encryption documentation.

APM

To ensure FedRAMP compliance, all APM agent configurations must report to gov-collector.newrelic.com rather than the default. Depending on the agent, you can either use code-based configuration or an environment variable.

Language Code or environment variable
C SDK

In code:

strcpy(_newrelic_app_config_t->redirect_collector, "gov-collector.newrelic.com");

Environment variable: none

Go

In code:

app, err = newrelic.NewApplication(
  newrelic.ConfigAppName("App Name"),
  newrelic.ConfigLicense(os.Getenv("NEW_RELIC_LICENSE_KEY")),
  func(cfg *newrelic.Config) {
    cfg.Host = "gov-collector.newrelic.com"
  },
)

Environment variable: NEW_RELIC_HOST

Java

In newrelic.yml:

common: &default_settings
  host: gov-collector.newrelic.com

Or set a system property of:

newrelic.config.host

Environment variable: NEW_RELIC_HOST

.NET

In your XML config next to the license key:

<service licenseKey="YOUR_LICENSE_KEY"
host="gov-collector.newrelic.com"/>

Environment variable: NEW_RELIC_HOST

Node.js

In newrelic.js:

host: 'gov-collector.newrelic.com'

Environment variable: NEW_RELIC_HOST

PHP

In newrelic.ini:

newrelic.daemon.collector_host = gov-collector.newrelic.com

Environment variable: none

Python

In newrelic.ini:

[newrelic]
host = gov-collector.newrelic.com

Environment variable: NEW_RELIC_HOST

Ruby

In newrelic.yml:

common: &default_settings
  host: gov-collector.newrelic.com

Environment variable: NEW_RELIC_HOST

Elixir (open source agent)

In config.exs:

config :new_relic_agent,
  host: "gov-collector.newrelic.com"

Environment variable: NEW_RELIC_HOST

Mobile monitoring

To ensure FedRAMP compliance when using our agents for mobile monitoring, all mobile agent configurations must report to gov-mobile-collector.newrelic.com rather than the default. Use code-based configuration. Environment variables are not available.

Agent Code or environment variable
Android

In code:

NewRelic.withApplicationToken({APP_TOKEN})
    .usingCollectorAddress("gov-mobile-collector.newrelic.com")
    .usingCrashCollectorAddress("gov-mobile-crash.newrelic.com")
    .start(this.getApplication());

Environment variable: none

iOS

In code:

[NewRelic startWithApplicationToken:@"{APP_TOKEN}"
    andCollectorAddress:@"gov-mobile-collector.newrelic.com"
    andCrashCollectorAddress:@"gov-mobile-crash.newrelic.com"];

Environment variable: none

Infrastructure monitoring

To ensure FedRAMP compliance when using our agents for infrastructure monitoring, you must change three of the endpoints used for reporting. To set these three endpoints, change your YAML configuration or environment variables.

YAML

Use these values if you want to change your YAML configuration for infrastructure monitoring:

Field Endpoint URL
collector_url
https://gov-infra-api.newrelic.com
identity_url
https://gov-identity-api.newrelic.com
command_channel_url
https://gov-infrastructure-command-api.newrelic.com

Environment variables

Use these values if you want to change your environment variables for infrastructure monitoring:

Field Endpoint URL
NRIA_COLLECTOR_URL
https://gov-infra-api.newrelic.com
NRIA_IDENTITY_URL
https://gov-identity-api.newrelic.com
NRIA_COMMAND_CHANNEL_URL
https://gov-infrastructure-command-api.newrelic.com

Insights and custom events

To ensure FedRAMP compliance, all traffic reporting to insights-collector.newrelic.com must instead report to gov-insights-collector.newrelic.com.

Events via New Relic Telemetry SDKs

Language Code
Java

In code:

SenderConfiguration configuration = SenderConfiguration
  .builder(
    "gov-insights-collector.newrelic.com",
    EventBatchSender.EVENTS_PATH)
  .build();

EventBatchSender eventBatchSender = EventBatchSender.create(configuration);
Python

In code:

event_client = EventClient(host="gov-insights-collector.newrelic.com")

For more information, see our Telemetry API documentation in GitHub.

Browser monitoring

The Browser agent transmits data to New Relic's collectors by using the domain gov-bam.nr-data.net for both beacon and error_beacon.

Ensure the script element tag that contains configuration and timing data is updated to the following:

window.NREUM||(NREUM={});NREUM.info={"beacon":"gov-bam.nr-data.net","errorBeacon":"gov-bam.nr-data.net"...

For more help

If you need more help, check out these support and learning resources: