1. Static: The IP address must be static and not change without notice.
2. Owned by your organization: The IP must be allocated to your company's infrastructure, not shared with other companies or resources (such as through a CDN).
3. Associated with production servers: The IP must be used by production servers, not developer laptops or office networks.

Once you confirm your IP addresses meet these criteria, open a support ticket through your FusionAuth account portal with:

• The list of IP addresses to be added
• Confirmation that each criterion is met
• The FusionAuth Cloud hostname your application connects to

FusionAuth will then add the addresses to your allow list. Note that if you use shared network infrastructure (like NAT gateways), all traffic from that infrastructure will share the same outbound IP, which is acceptable as long as the criteria above are met.

Important notes:

• Allow list changes typically take two to three business days to implement
• Adding IPs to the allow list helps prevent 429 response codes and CAPTCHA challenges that may occur due to FusionAuth Cloud's rate limiting protections
• If you no longer need an IP address on the list, you can submit a support ticket to have it removed

Related Documentation

• FusionAuth Cloud CAPTCHA and Rate Limits - Detailed information about IP allow lists and rate limiting
• FusionAuth Cloud Support - How to access support for your FusionAuth Cloud deployment
• FusionAuth Cloud Deployment IP Addresses - Information about IP addresses for your FusionAuth Cloud instances