Shipt Logo

Developer

Delivery APIPlatform APIResource GuidesSFTP Connection
Login

IP Allowlist - Technical Details#

Allowing Shipt to Connect with You#

You can retrieve our new NAT IPs via a REST API call to: https://ip-ranges.shipt.com/. We recommend regular automated updates to your allow lists using the API call.

  1. Add new IP addresses to your inbound allow lists. This should be completed as soon as possible, but no later than Wednesday, June 7, 2023. Your infrastructure will then be able to receive traffic from both sets of NAT IP addresses, old or new. Please notify your Partner Success contact once complete.

    Risk: There is no service interruption in adding these IP addresses. The new IP addresses are reserved exclusively for Shipt's use.

  2. Shipt sends traffic from the new set of IP addresses only. A planned date will be provided after step one is complete.

    Risk: If step one has been fully executed and communicated with Partner Success, there will be no risk or interruption in service.

  3. Partners remove the old set of addresses from allow lists. Shipt will not supply a date for this action. It can be executed at your leisure. Over time, however, there is an increased security risk.

    Risk: Shipt's old IP addresses are not reserved exclusively for our use. They will eventually be returned to a pool to be used by other entities using the same Cloud Provider as Shipt. If not eventually removed from your allow lists, traffic may be allowed to enter your network from someone other than Shipt, increasing your security risks.

Validation

If you wish to validate this type of traffic, email your Partner Success Manager with an IP address and port (a port is a number between 0 and 65535) we can use to attempt communication. Please use the subject "VALIDATE: Shipt NAT Traffic to Partners."

  • There is no need for your IP address to return any data. We will confirm access is possible via email and let you know if we need additional information or assistance troubleshooting.
  • We will respond with communication both in case of success and the need for additional troubleshooting.

Allowing You to Connect with Shipt#

We are changing our CDN provider from Cloudflare to Fastly. If your network uses firewalls for traffic outbound from your network, you should already have Cloudflare public IPs listed. You will need to add Fastly's public IPs to that list. You can obtain this list via https://api.fastly.com/public-ip-list. This should be completed as soon as possible, but no later than Wednesday, June 7,

Validation

Using any HTTP tool (curl, HTTPie, etc), call https://partner-test.shipt.com.

Important: This test is only valid if made from a resource where network traffic utilizes your modified firewall and/or allow list. Use an application server that makes calls to Shipt's integration endpoints.

  • Your change was successful if you received a valid response (HTTP 200). Please notify your Shipt Partner Success Manager of success.
  • If you do not receive a response, contact your Partner Success Manager for assistance. Please use the subject line "TROUBLESHOOT: Partner Network Traffic to Shipt"