46,241 questions
Should be able use the following reference to be able to whitelist the IPs depending on your region.
How can I get the list of IPs used by the Azure DevOps Pipeline standard Agent Pools
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(41.6, 54%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ES%3C/text%3E%3C/svg%3E)
SE
0
Reputation points
I am looking to whitelist the Azure DevOps Pipeline Agent Pool IP addresses to a destination database so that we can securely allow automated deployments to it from those IP addresses only. I have downloaded the Azure IP range file and reviewed it however the IPs I have seen used so far are not consistent and mapping to a specific service or region I was expecting.
Community Center | Not monitored
1 answer
Sort by: Most helpful
-
Jordan T 0 Reputation points2024-11-05T16:34:31.41+00:00 -
SE 0 Reputation points
2024-11-05T18:28:41.3133333+00:00 I believe what you shared are specific to connecting to Azure DevOps and not vice versa when Azure DevOps Pipeline agents are connecting to your infrastructure.
My need is for the Pipeline Agent to connect to our infrastructure and to know what possible Azure IP CIDR blocks it could be coming from.
For example, when testing I have seen IPs showing up from ranges like West US region (AzureCloud.westus: "13.64.0.0/16"). Another test came from East US region (AzureCloud.eastus: "52.152.128.0/17")
-
SE 0 Reputation points
2024-11-05T18:36:53.23+00:00 I believe those IP in the link are for when you want to connect your infrastructure to Azure DevOps frontend services and not my scenario. My scenario is the opposite in that I want the Azure DevOps Pipeline to connect to our infrastructure in a secure fashion by whitelisting all the potential CIDR block ranges that Azure DevOps Pipelines could be using.
Here is what I have seen with a could tests...
- Test 1 - Azure DevOps Pipeline IP address is in CIDR block "52.152.128.0/17" belonging to AzureCloud.eastus (ref in JSON file link)
- Test 2 - Azure DevOps Pipeline IP address is in CIDR block "13.64.0.0/16" belonging to AzureCloud.westus (ref in JSON file link)
Sign in to comment -