Dynatrace SaaS IP for triggering workflow actions

[nprashiyer]

I want to trigger an ansible job template in the workflow. My ansible is hosted in AWS EC2 instance, I need the IPs from which connection will be made to be added to the Security Groups. How to find what IPs need to be added? 

FYI - I tried getting the IP from Deploy Activegate and got 3 IP address, but that didnt work. I'm getting connection timed-out in the workflow

[Mizső]

Hi @nprashiyer 

AG and OA communicate with SaaS via these IP addresses. I guess you can expect communication from these IP addresses if Saas direclty call your Ansible instance. 

I hope it helps.

Best regards,

János 

[christian_kreuz]

Sorry, but this is not true for Workflows and Functions.

[christian_kreuz · Accepted solution]

Currently, the outgoing IP address is not fixed, and depends on the data-center your environment is hosted in (and even then, the list of IP addresses can be quite long).

If you want a stable IP address for outgoing traffic, at least right now, you need to setup and use Edge Connect.

[MarwanC]

I would like to contribute to this post as follows: 

Dynatrace Workflows & App Engine (SaaS)

1. Outbound IPs are not fixed:

   • Dynatrace SaaS environments use dynamic outbound IPs for workflows and JavaScript runtime functions.
   • These IPs change frequently and are not predictable. [community....atrace.com]

2. No official static list available:

   • Dynatrace does not publish a fixed list of outbound IPs for workflows or AppEngine.
   • If you need to allow outbound traffic from Dynatrace to your infrastructure, you must sample the IPs during workflow execution or use Edge Connect to route traffic through a known IP. [community....atrace.com]

3. Workaround: Use Edge Connect:

   • To get stable outbound IPs, Dynatrace recommends setting up Edge Connect, which acts as a proxy and gives you control over the IPs used for outbound traffic. [community....atrace.com]

4. Allowlisting External Hosts:

   • You can configure which external hosts Dynatrace workflows and functions can connect to via:
     • Settings > General > Environment Management > External Requests
     • Add domains or IPs  [docs.dynatrace.com]