IP Addresses
Knowing the IP addresses of the build machines that Travis CI uses can be helpful when you need them safelisted to access your internal resources. Since builds run in a variety of different infrastructures, the IP ranges to safelist depend on the infrastructure your builds are running on.
Infrastructure | NAT hostname | Current DNS | Last recorded IPs |
---|---|---|---|
OS X | nat.macstadium-us-se-1.travisci.net | A recs | 207.254.16.35 207.254.16.36 207.254.16.37 207.254.16.38 207.254.16.39 |
Linux, Windows | nat.gce-us-central1.travisci.net | A recs | 34.66.25.221 , 34.66.50.208 , 34.66.178.120 , 34.66.200.49 , 34.68.144.114 , 34.122.173.211 , 34.122.208.80 , 35.184.226.236 , 35.188.1.99 , 35.188.15.155 , 35.188.73.34 , 35.192.10.37 , 35.192.85.2 , 35.192.91.101 , 35.192.136.167 , 35.192.187.174 , 35.193.7.13 , 35.193.14.140 , 35.193.184.18 , 35.202.145.110 , 35.202.245.105 , 35.222.7.205 , 35.224.112.202 , 104.154.113.151 , 104.154.120.187 , 104.154.182.187 , 104.197.122.201 , 104.198.131.58 |
Linux, Windows | nat.gce-us-east1.travisci.net | A recs | 34.73.34.132 , 34.73.65.1 , 34.73.66.97 , 34.74.16.120 , 34.74.79.111 , 34.74.91.53 , 34.74.253.255 , 35.185.97.135 , 35.196.72.151 , 35.196.82.30 , 35.196.99.99 , 35.196.158.85 , 35.227.58.83 , 35.227.97.188 , 35.229.115.143 , 35.231.58.0 , 35.237.8.208 , 35.237.56.208 , 35.237.212.185 , 104.196.53.161 , 104.196.57.92 , 104.196.213.122 |
(all combined) | nat.travisci.net | A recs | (sum of all above) |
Note that these ranges can change in the future, and the best way to keep an
updated safelist is to use the current A records for the NAT hostname shown
above, such as by using dig
:
dig +short nat.travisci.net | sort
or using a service like dnsjson.com to interact with JSON:
curl -s https://dnsjson.com/nat.travisci.net/A.json | jq '.results.records|sort'
Note that the IP addresses used for notifications are different.
More details about our different infrastructures are available on the virtualization environments page.
Load balancing #
Due to load balancing, connections from build machines to external resources are not guaranteed to come from the same IP address, even when sent from the same job. This may cause them to trigger security checks, especially when using protocols that utilize multiple connections like FTP and VPN. If this occurs, reconfigure your servers to allow for connections from multiple IP addresses.
Notification #
We will announce changes to this set of IP addresses with a 24-hour notice period. We recommend you use the DNS record to keep track automatically, but if you require a manual notification, you can subscribe to the mailing list: