Adding DX to your allow list

IP Allow List

DX makes outbound requests from static IP addresses. The applicable addresses depend on which part of DX is making the request, as described below.

Data connectors and importers

Allowlist these where a data source (e.g. GitHub Enterprise, Jira Data Center) restricts inbound traffic or sits behind a firewall.

If your organization allows no inbound traffic at all and can’t allowlist these IPs, see the Reverse tunnel proxy.

100.27.58.172
44.210.46.86
54.83.185.67
34.225.213.200
34.237.129.145
98.86.134.253
52.71.141.130
54.83.198.60
35.181.183.108
13.36.134.76

The DX application

Requests the DX app sends to your endpoints: self-service form webhooks, PlatformX survey webhooks, Fabric repository integrations, and Slack/Microsoft Teams messaging. Allowlist these on any firewall or WAF in front of an endpoint DX sends to.

98.87.192.78
52.5.155.228

Deprecated addresses

The following IP addresses are being deprecated and will be permanently retired:

164.90.253.110
143.244.214.32
138.197.229.138
104.248.109.162

The DX Data Cloud database instance operates on a separate network. For database connections, we guarantee consistency of the hostname <customer_name>.<uid>.db.getdx.net, but the underlying IP address is subject to change due to resizes or upgrades.

Note for single-tenant deployments: The IP addresses on this page apply to multi-tenant SaaS only. DX Dedicated instances send and receive all traffic through a single dedicated IP: the one your tenant_name.getdx.io hostname resolves to. Allowlist that address instead. The one exception is AI Code Insights automatic updates, which developer machines download from software.getdx.net regardless of deployment model; see the URL Allow List below. DX Managed runs in your own AWS account, so DX’s public IPs don’t apply and connectivity is configured on your own infrastructure. Your DX account representative can confirm the details.

Email Allow List

Smaller organizations may be able to receive emails without issue due to the low volume. However, we do advise larger organizations and those that run their own mail servers to add DX to your allow list. The details you need to give to your system administrators are:

  • Emails from the DX platform will come from the email address “notifications@mail.getdx.com” with the Sender name “DX”.
  • Emails will also be sent from the IP Address “50.31.156.96” or “104.245.209.192”.

URL Allow List

If your organization uses web content-filtering systems such as a web application proxy or web gateway, this may cause problems accessing the DX platform.

If users experience issues with the platform loading correctly, we recommend asking your network administrator to add the following URLs to the allow list:

Releases on software.getdx.net are all served under the /ai-code-metrics/ prefix. If your gateway filters by path rather than by host, allow:

https://software.getdx.net/ai-code-metrics/dx-ai-insights-<version>-darwin.pkg
https://software.getdx.net/ai-code-metrics/dx-ai-insights-<version>-windows-amd64.msi
https://software.getdx.net/ai-code-metrics/dx-ai-insights-<version>-linux.tar.gz
https://software.getdx.net/ai-code-metrics/ai-code-metrics-current-version.txt
https://software.getdx.net/ai-code-metrics/ai_code_metrics_changelog.md

Filenames are version-stamped, so allow the whole /ai-code-metrics/ prefix rather than individual releases. The host is fronted by a CDN with rotating IP addresses; allow it by hostname, or use the CLOUDFRONT ranges from AWS’s ip-ranges.json if your firewall requires CIDRs. A request to a path outside the prefix returns 403, not 404. See Release download paths for which process fetches each path and how to test them.

If your administrators have any issues or queries, please direct them to contact support@getdx.com.