How to get static outbound IP addresses for FusionAuth Cloud email delivery?

[FASupportBot]

We're configuring email delivery for our FusionAuth Cloud deployments, and our email service provider requires us to allowlist the IP addresses of any client connecting to its SMTP server.

Could you please provide the outbound (egress) IP address(es) used by our hosted instances?

A few related questions:

• Are these IPs static, or can they change (e.g. during upgrades, restarts, or region failover)?
• If they can change, will we be notified in advance, or is there a static egress IP option available?
• Are there any additional IPs we should allowlist (e.g. for high-availability nodes)?

[FASupportBot]

FusionAuth Cloud deployments can provide static outbound IP addresses for email delivery and other outbound connections. The availability and process depend on when your deployment was created.

Getting Static IP Addresses

For new FusionAuth Cloud deployments: Static IP addresses are already configured automatically.

For existing deployments: You need to open a support ticket to get static IP addresses assigned.

How to Request Your Deployment's IP Addresses

To retrieve the specific outbound IP addresses for your deployment (e.g., to allowlist them with your SMTP provider):

1. Open a support ticket
2. Include the name of the deployment for which you need the outbound IP addresses

Once assigned, these IP addresses will remain static and won't change during upgrades, restarts, or normal operations.

Important Notes About the IP Addresses

• The provided IP addresses are for outbound traffic only (firewalls, allowlists, SPF records, etc.) — they will not respond to HTTP API calls
• You should add these IPs to your SPF DNS record for your sending domain to prevent password reset and other transactional emails from landing in spam
• Multiple IP addresses may be provided for high availability

Recommended Approach

If you have both production and development environments:

1. Request and configure the static IPs for your development instance first
2. Test email delivery with the allowlisted IPs
3. Once verified, request and configure the production deployment's static IPs

Related Documentation

• FusionAuth Cloud - Deployment IP Addresses - Official documentation on obtaining IP addresses for your FusionAuth Cloud deployment
• Configure SMTP - Complete guide to configuring email delivery in FusionAuth
• SMTP Best Practices - Recommendations for maintaining good sender reputation including SPF records
• GitHub Issue #1393 - Original feature request for static IP addresses in FusionAuth Cloud