[{"data":1,"prerenderedAt":180},["ShallowReactive",2],{"docs-\u002Fdocs\u002Fprobe-ips":3},{"id":4,"title":5,"body":6,"description":172,"extension":173,"meta":174,"navigation":175,"path":176,"seo":177,"stem":178,"__hash__":179},"docs\u002Fdocs\u002F18.probe-ips.md","Probe IPs & regions",{"type":7,"value":8,"toc":165},"minimark",[9,13,17,25,30,33,83,86,90,113,117,120,131,138,144,147,151],[10,11,5],"h1",{"id":12},"probe-ips-regions",[14,15,16],"p",{},"Vantaj runs checks from dedicated probe servers in several regions. If the endpoints you monitor are behind a firewall, VPN, or IP allowlist, you'll need to permit traffic from these probe IPs so the checks can get through.",[14,18,19,20,24],{},"Find the current list under ",[21,22,23],"strong",{},"Settings → Monitoring Probe IPs",".",[26,27,29],"h2",{"id":28},"regions","Regions",[14,31,32],{},"Checks currently run from three regions:",[34,35,36,49],"table",{},[37,38,39],"thead",{},[40,41,42,46],"tr",{},[43,44,45],"th",{},"Region",[43,47,48],{},"Location",[50,51,52,63,73],"tbody",{},[40,53,54,60],{},[55,56,57],"td",{},[21,58,59],{},"US East",[55,61,62],{},"North America",[40,64,65,70],{},[55,66,67],{},[21,68,69],{},"Europe",[55,71,72],{},"Western Europe",[40,74,75,80],{},[55,76,77],{},[21,78,79],{},"Asia Pacific",[55,81,82],{},"Southeast Asia",[14,84,85],{},"Running from multiple regions means a check is only treated as a real outage when it fails broadly, not because of a single bad network path. Response-time charts on a monitor's detail page break results down by region.",[26,87,89],{"id":88},"allowlisting-the-ips","Allowlisting the IPs",[91,92,93,99,106],"ol",{},[94,95,96,97],"li",{},"Open ",[21,98,23],{},[94,100,101,102,105],{},"Copy the IP for each region (or ",[21,103,104],{},"Copy all IPs",")",[94,107,108,109,112],{},"Add them to your firewall allowlist, security group, or ACL as ",[21,110,111],{},"inbound"," rules for the endpoints you're monitoring",[26,114,116],{"id":115},"keeping-the-list-current-automatically","Keeping the list current automatically",[14,118,119],{},"Probe IPs can change when we deploy new infrastructure. Instead of copying them by hand, you can poll the live list:",[121,122,127],"pre",{"className":123,"code":125,"language":126},[124],"language-text","GET https:\u002F\u002Fapp.vantaj.co\u002Fapi\u002Fprobe-ips\n","text",[128,129,125],"code",{"__ignoreMap":130},"",[14,132,133,134,137],{},"For tools that expect one IP per line — Palo Alto External Dynamic Lists, ",[128,135,136],{},"iptables"," scripts, and similar — request the plain-text format:",[121,139,142],{"className":140,"code":141,"language":126},[124],"GET https:\u002F\u002Fapp.vantaj.co\u002Fapi\u002Fprobe-ips?format=text\n",[128,143,141],{"__ignoreMap":130},[14,145,146],{},"Point your firewall automation at one of these endpoints to keep allowlists in sync as IPs change.",[26,148,150],{"id":149},"heartbeats-dont-need-this","Heartbeats don't need this",[14,152,153,154,158,159,164],{},"Allowlisting only applies to checks Vantaj makes ",[155,156,157],"em",{},"to"," your endpoints (HTTP, ping, port). ",[160,161,163],"a",{"href":162},"\u002Fdocs\u002Fheartbeats","Heartbeats"," work the other way around — your job calls Vantaj — so there's nothing to allowlist for them.",{"title":130,"searchDepth":166,"depth":166,"links":167},2,[168,169,170,171],{"id":28,"depth":166,"text":29},{"id":88,"depth":166,"text":89},{"id":115,"depth":166,"text":116},{"id":149,"depth":166,"text":150},"Allowlist Vantaj's checker IPs so it can reach endpoints that aren't publicly open","md",{},true,"\u002Fdocs\u002Fprobe-ips",{"title":5,"description":172},"docs\u002F18.probe-ips","8TCqAkVWIbxSM8-scLzjUo3KX_uXZo5aAjj11gvheN4",1780583797658]