App Builder integration with external services using dynamic IPs

When integrating App Builder with external services, you need to whitelist IP addresses for secure communication. Because Adobe Runtime doesn’t provide static egress IPs, it complicates the process. To resolve this, configure a secure proxy, honor DNS TTL values, and avoid caching outdated DNS records.

Description description

Environment

  • App Builder
  • Adobe Experience Manager
  • Adobe Commerce

Issue/Symptoms

  • App Builder integration with external services requires IP whitelisting for secure communication.
  • Adobe Runtime doesn’t expose static egress IP addresses due to security policies.
  • You face challenges configuring staging and production environments without static IP ranges.

Resolution resolution

To resolve the issue, follow these steps:

  1. Configure a proxy server to route secure communication between your system and Adobe Runtime. This avoids the need to expose egress IPs directly.
  2. When resolving endpoints honor the Time to Live (TTL) values returned by I/O Runtime DNS records.
  3. Avoid caching DNS records beyond the TTL to prevent connectivity issues caused by outdated IP addresses.
  4. Refer Adobe I/O Runtime Documentation for setting up secure proxies and managing dynamic ingress IPs.

If you need help or have questions, contact Adobe support for guidance specific to your setup.

recommendation-more-help
3d58f420-19b5-47a0-a122-5c9dab55ec7f