14 Sep 2025 04:49 PM
Our team needs to manage multiple Dynatrace SaaS tenant accounts. To achieve this, there are some workflows across the various tenants, even in other accounts, that make calls to a single central tenant, where central control dashboards exist in this tenant.
When implementing the IP Allow List feature in our tenants, the central tenant started blocking calls from these other managed tenants.
We would like Dynatrace to help us by providing the outbound IP addresses of the various tenants so we can register them on the central tenant's IP Allow List.
How would we obtain these IP addresses?
Note: We sampled workflow executions and found that the outbound IP addresses of the JavaScript runtimes change constantly, not following a standard pattern.
14 Sep 2025 05:13 PM
Note 2: Even though it is counterintuitive, since this is Dynatrace SaaS to Dynatrace SaaS communication and not Dynatrace SaaS to client infrastructure, we tried to configure an on-premises edge connect to accept the "*.dynatrace.com" connection pattern, but Edge Connect did not accept this pattern (perhaps there is a validation with an internal restriction in Dynatrace to use this pattern...)