Network configuration

This page lists the addresses involved when traffic between the automator and your network must be explicitly allowed in your firewall. Most environments need no firewall changes at all: connections from your systems to the automator are regular outbound HTTPS, and the proxy's default pull transport mode also connects outbound only.

Your network to the automator (outbound)

This applies to any on-premises system that calls the automator, for example to deliver a webhook or to call a service endpoint. It also applies to a proxy using the pull transport mode.

Allow outbound HTTPS (port 443) to the automator:

Environment	Hostnames
Production	automator.at automator.techwork.at automation.techwork.at automator-eu.techwork.at automator-bt.techwork.at
Demo	automator-demo.at

The automator is hosted behind a load balancer and its IP addresses can change, so allow this traffic by hostname, not by IP address.

The automator to your network (inbound)

This applies when the automator connects to a published endpoint in your network, for example when a package calls an on-premises API. It also applies to a proxy using the push transport mode.

The automator connects from a fixed set of IP addresses. Allow them as sources in your firewall:

Environment	IP addresses
Production	52.211.135.224 34.243.61.239 54.154.40.146
Demo	54.194.87.33 3.254.16.127

Destination ports and internal IP addresses are defined by your own applications and infrastructure.