search

inngest / inngest-js

The developer platform for easily building reliable workflows with zero infrastructure for TypeScript & JavaScript
https://www.inngest.com/
GNU General Public License v3.0
434 stars 42 forks source link

Static Inngest IPs #487

Open hckhanh opened 8 months ago

hckhanh commented 8 months ago

Is your feature request related to a problem? Please describe.

I searched in Inngest docs but I cannot see any section about the security practices

Additionally, Are there any ip ranges just for inngest connection only. I really want to whitelist the access connection from Inngest to /api/inngest api

JonParton commented 6 months ago

Also interested in this answer and it being documented some where!

From Searching Discord I found there used to be some fixed IP's and now it looks like Inngest migrated to some new ones.

tonyhb @ inngest — 20/03/2024 18:18 ideal. we'll be moving to our new IP range 198.212.45.0/24 this week + next, at which point we'll be allowlisted by clouds

@tonyhb - If you confirmed if the migration happened and the Inngest server now has a set of IP's as below you will be able to close this ticket easily 🙂👍

198.212.45.0/24

jasonroelofs commented 1 week ago

Is this IP range active? I tried using it and it didn't seem to work yet.

JonParton commented 1 week ago

So, pretty sure these are not implemented yet @jasonroelofs .

However, there is an endpoint below that will provide you with the current Inngest source IP's

https://inngest.com/ips-v4

@tonyhb also confirmed that any new IP's would appear in this endoint at least 48 hours before use ... So you have that rolling window to have a cron function to keep them in sync in your white lists etc!

Don't think that these details are actually documented any where ... But if it were it could probably close this ticket!

jasonroelofs commented 6 days ago

Got it, thanks for the link!