As part of continuing projects to increase the reliability and scalability of SARA Network, the IP addresses associated with some of the services will be changing soon. These changes may require customer-side updates to firewall rules to continue uninterrupted service.

Specifically, firewall rules that restrict traffic based on IP addresses will have to be changed for the following circumstances:

Firewalls between premise webhook listener service and SARA APIs

If this applies to you, changes are needed.

Firewall and mail server connector rules that restrict traffic based on IP addresses will have to additionally add IP addresses for the following circumstances:

Firewalls and mail server connectors between SMTP/IMAP servers and SARA Background Worker Process

If this applies to you, changes are suggested to take advantage of improvements.

If neither of these apply, no changes are needed.

We plan to migrate traffic to the addresses below on April 8, 2021.

Outbound Addresses

SARA APIs

When SARA is configured to post received payments back to ERP systems and SARA Portal receives an approved status confirmation back from a payment processor for a payment transaction, SARA will webhook that information to the endpoint configured in SARA from the SARA APIs. If you have previously configured network rules to only allow inbound requests from specific addresses, you will need to update those rules to include the additional addresses. Once SARA Network migrates traffic to the new addresses, the addresses in the previous list can be removed from your firewall rules.

Previous addresses of:

Will have additional blocks of addresses to align to regional datacenters of:

- 52.162.107.8

- 52.162.88.95

- 52.162.95.238

- 52.162.95.133

- 52.162.95.136

- 52.162.35.3

- 52.162.208.187

- 52.162.88.113

- 52.162.95.9

- 52.162.213.220

- US – 23.96.189.32/30

- AU – 20.53.145.244/30

- EU – 20.50.224.84/30

SARA Background Worker Process

To increase reliability, scalability, and consistency, SARA Network will be adding additional resources for handling the sending and receiving of emails (SMTP/IMAP). Connectivity to SMTP and IMAP endpoints originate from the SARA Background Worker Process. If you have previously configured network and mail server connector rules to only allow inbound requests from specific addresses, you will need to update those rules to include the additional addresses. The previous addresses will still be active after the migration date, but to take advantage of the email reliability and scalability improvements, the new block of addresses will need to be added. Migration of email to use the new resources and additional block of addresses is controlled on an account-by-account basis.

Previous addresses of:

Will have an additional block of addresses of:

- 23.101.161.142

- 23.96.189.32/30