Static source IPs (UPT-013)

Embed
Preview of the card
<a href="https://forumulate.com/p/watchtower/docs/static-ips"><img src="https://forumulate.com/api/public/orgs/watchtower/spaces/docs/pages/55a4f1d3-d564-4206-9e9a-db86c1de1393/social-card.svg?v=3e7ae33eec8b" alt="Static source IPs (UPT-013)" width="600" height="315"></a>

Checks from the managed (public) locations come from fixed addresses you can allowlist in your firewall.

GET /v1/locations/public (authenticated) returns each managed location with egress_ips[] and last_changed_at.

The operator configures the list:

WT_PUBLIC_PROBE_IPS="eu=203.0.113.10|2001:db8::10,us=198.51.100.7"
WT_PUBLIC_PROBE_IPS_CHANGED="2026-10-30T00:00:00Z"

Invalid addresses are ignored. Move WT_PUBLIC_PROBE_IPS_CHANGED whenever the list changes and add an entry to the changelog below, so customers can update allowlists before the change takes effect.

Changelog

  • No changes yet.

Updated