Azure DevOps is currently investing in enhancing its routing structure. This change is designed to increase service availability and decrease service latency for many users. As a result of this enhancement, our IP address space will be changing. If you’re currently using firewall rules to allow traffic to Azure DevOps, please be sure to update these rules to account for our new IP ranges. These IP address changes go into full effect 6/28/2019.
Determining impact (coming soon)
To help you determine whether this change impacts your organization, we are building an Azure DevOps IP check page. When you navigate to the page, we’ll run a sample request against our new routing structure. If the request fails you’ll get a red “X” in the response. To resolve, you’ll need to update your IP address whitelist. This feature currently isn’t implemented, however it is expected to be in place within the upcoming week.
IP address whitelist changes
To react to the changes in our IP address space, users should ensure dev.azure.com is open and update their whitelisted IPs to include the following IP addresses (based on your IP version). If you are currently whitelisting the 13.107.6.183 and 13.107.9.183 IP addresses, please leave these in place. You do not need to remove them.
IPv4 ranges
13.107.6.0/24
13.107.9.0/24
13.107.42.0/24
13.107.43.0/24
IPv6 ranges
2620:1ec:4::/48
2620:1ec:a92::/48
2620:1ec:21::/48
2620:1ec:22::/48
Rollout plan
Over the course of the next few weeks, we will conduct a series of tests to identify organizations that may be impacted by these routing changes. We will conduct our first test June 14th at 9 AM EST. This test will last for 1 hour. We will conduct our second test June 21st during the hours of 8AM – 11AM EST. This test will last for 4 hours. If you are unable to access your organization during this period of time, please navigate to the status page and validate we are testing our new routing structure. In the event we are running these tests and you’re unable to access your Azure DevOps organization, please update your IP address whitelist.
Reporting Issues
If you experience any issues with accessing your Azure DevOps organization after updating your IP whitelist, please post an update on this open developer community item.
The post New IP firewall rules for Azure DevOps appeared first on Azure DevOps Blog.