DocumentationTargetTarget Developer Guide

Allowlist Target edge nodes

Last update: Tue Oct 28 2025 00:00:00 GMT+0000 (Coordinated Universal Time)

CREATED FOR:

  • Developer

Information and an up-to-date list of hosts to help you allowlist Adobe Target edges.

An edge is a geographically distributed serving architecture that ensures optimum response times for end-users requesting content, regardless of where they are located. Each edge node has all the information required to respond to the user’s content request and to track analytics data on that request. User requests are routed to the nearest edge node. For more information, see The edge network.

You can allowlist Target edge nodes, if desired.

IMPORTANT
In addition to allowlisting the Network Address Translation (NAT) IP addresses of Target edges and Target edge IP addresses discussed in the article, you should also allowlist all Adobe Analytics IP address blocks.
For more information, see All Adobe Analytics IP address blocks in the Adobe Analytics tech notes documentation.
Adobe Target infrastructure is being updated and customers who want to allowlist addresses must use both sets of IPs. Failing to do so will impact customers using server-side or hybrid implementations where Target API calls for fetching experiences are originated from within a network behind a firewall that is configured to use an allowlist.

To ensure uninterrupted access to Target through the Experience Edge Connector, customers can update their network configurations to allow traffic to the proxy service.

Proxy service overview

  • Service Endpoint: https://tnt-web-proxy.adobe.io.
  • Infrastructure: Hosted on the Adobe Ethos platform.
  • Note: This service uses latency-based DNS routing and does not rely on static IP addresses.

CNAME targets

The proxy service routes traffic dynamically across multiple regions using CNAME records. These are the current targets:

Edge Location
Egress IP Addresses
Region
CNAME Target
Europe (eu-west-1)
ethos.pub.ethos11-prod-nld2.ethos.adobe.net
US East (us-east-2)
ethos.pub.ethos11-prod-va7.ethos.adobe.net
US East (us-east-1)
ethos.pub.ethos11-prod-aus5.ethos.adobe.net

To ensure reliable connectivity, allowlist the following hostnames:

  • ethos.pub.ethos11-prod-nld2.ethos.adobe.net
  • ethos.pub.ethos11-prod-va7.ethos.adobe.net
  • ethos.pub.ethos11-prod-aus5.ethos.adobe.net

Optional: IP discovery

If your network policies require IP-based allowlisting, you can view the current public IP addresses associated with the proxy service using this tool:

  • DNSChecker – A Record Lookup for tnt-web-proxy.adobe.io
recommendation-more-help
6906415f-169c-422b-89d3-7118e147c4e3