All mabl test traffic originates through a fixed set of IP addresses. By adding mabl's static IP addresses to a firewall allowlist, permitlist, or whitelist, you can give mabl access to non-public testing and production environments for cloud runs.
Static IP addresses are an alternative to mabl Link. If you desire a more secure solution to testing private environments behind a corporate firewall, read more about mabl Link.
Current static IP addresses
As of this article being updated, mabl's static egress IPs are:
- 3.146.47.160/27
- 34.132.2.128/28
- 34.31.138.224/27
Unless you have configured your tests to run over mabl Link, all cloud test traffic, webhook calls, and URL validation traffic originate from these IP addresses. You can also find the current static IP addresses on the networking page in the app: Settings > Networking.
Example of static IP addresses used by mabl browsers
The IP addresses are listed in CIDR block format. If your firewall doesn't use CIDR format, just drop the /28 from the address and use that in your firewall configuration.
mabl uses the standard port for HTTPS / TLS (443).
Applications under test hosted on Google Cloud Platform services
If your application under test is hosted by select Google Cloud Platform services, such as the following, traffic will appear to originate from the 0.0.0.0 address, because the test traffic will transit the internal Google Could network directly to your application.
- Google App Engine
- Google Cloud Run
- Google Cloud Functions
Communicating IP Address Changes
If mabl adds or removes static IP addresses, the change will be communicated via:
- the Friends of mabl Slack team
- Release Notes
- the mabl status page
- the networking page in the app: Settings > Networking
Retired static IP addresses
Previously used egress IPs that are now retired are:
- 104.198.166.162/32 (RETIRED)
- 35.184.236.163/32 (RETIRED)
- 207.254.16.90/32 (RETIRED)
Retired egress IPs remain in the control of mabl for security purposes, but are no longer used for production mabl test traffic.
Limitation
Private static IP addresses are not yet available on a per workspace/customer basis