topic Re: Dynatrace Saas IP for triggering workflow actio s in Automations

Dynatrace SaaS IP for triggering workflow actions

nprashiyer — Thu, 06 Feb 2025 08:44:15 GMT

I want to trigger an ansible job template in the workflow. My ansible is hosted in AWS EC2 instance, I need the IPs from which connection will be made to be added to the Security Groups. How to find what IPs need to be added?

FYI - I tried getting the IP from Deploy Activegate and got 3 IP address, but that didnt work. I'm getting connection timed-out in the workflow

Re: Dynatrace Saas IP for triggering workflow actio s

Mizső — Sun, 26 Jan 2025 18:59:05 GMT

Hi @nprashiyer

AG and OA communicate with SaaS via these IP addresses. I guess you can expect communication from these IP addresses if Saas direclty call your Ansible instance.

I hope it helps.

Best regards,

János

Re: Dynatrace Saas IP for triggering workflow actio s

christian_kreuz — Wed, 05 Feb 2025 16:55:08 GMT

Currently, the outgoing IP address is not fixed, and depends on the data-center your environment is hosted in (and even then, the list of IP addresses can be quite long).

If you want a stable IP address for outgoing traffic, at least right now, you need to setup and use Edge Connect.

Re: Dynatrace Saas IP for triggering workflow actio s

christian_kreuz — Wed, 05 Feb 2025 16:55:26 GMT

Sorry, but this is not true for Workflows and Functions.

Re: Dynatrace SaaS IP for triggering workflow actions

MarwanC — Wed, 22 Oct 2025 22:41:40 GMT

I would like to contribute to this post as follows:

Dynatrace Workflows & App Engine (SaaS)

Outbound IPs are not fixed:
- Dynatrace SaaS environments use dynamic outbound IPs for workflows and JavaScript runtime functions.
- These IPs change frequently and are not predictable. [community....atrace.com]
No official static list available:
- Dynatrace does not publish a fixed list of outbound IPs for workflows or AppEngine.
- If you need to allow outbound traffic from Dynatrace to your infrastructure, you must sample the IPs during workflow execution or use Edge Connect to route traffic through a known IP. [community....atrace.com]
Workaround: Use Edge Connect:
- To get stable outbound IPs, Dynatrace recommends setting up Edge Connect, which acts as a proxy and gives you control over the IPs used for outbound traffic. [community....atrace.com]
Allowlisting External Hosts:
- You can configure which external hosts Dynatrace workflows and functions can connect to via:
  - Settings > General > Environment Management > External Requests
  - Add domains or IPs [docs.dynatrace.com]