Networking

Approve the IPs once.

One hostname, two permanent IPs, outbound HTTPS. No inbound firewall rules or future IP allowlist changes.

  • Fall back to the fixed IPs when DNS fails.
  • Commands can use HTTPS polling; shells and tunnels require WebSockets.
  • Use your own hostname on Enterprise Plus.

Device egress

the complete allowlist

Host
commandplane.com or your own hostname on Enterprise Plus
IP
15.197.93.179
IP
15.197.160.235
Port
443/tcp
Direction
outbound only
Inbound ports
0 required on the customer's side

Allowlist commandplane.com, or use the addresses above when fixed-IP rules are required.