---
title: "Network configuration and IP allowlist"
canonical: "https://support.appfire.com/space/TFS4JIRA/2258337869/Network%20configuration%20and%20IP%20allowlist"
format: markdown
---
> Macro (aura-html)

TFS4Jira Cloud Native operates using Google Cloud Platform (GCP) infrastructure and requires specific network access to function properly with your Azure DevOps (ADO) Cloud instance.

## IP allowlist requirements

### For organizations using Microsoft Entra ID or firewall restrictions

If your organization uses Microsoft Entra ID to restrict access to your Azure DevOps Cloud instance or has firewall rules in place, you will need to allowlist specific IP ranges to allow TFS4Jira Cloud Native to establish connections.

### Required IP ranges

TFS4Jira Cloud Native uses Google Cloud Functions deployed in the **Europe-West3** region. The app operates from dynamic IP ranges within this region.

Alowlist all IP ranges for the europe-west3 region from Google's official IP range list:

- Reference: [https://www.gstatic.com/ipranges/cloud.json](https://www.gstatic.com/ipranges/cloud.json)
- Filter for: `europe-west3` region entries

> 📝 **Dynamic IPs**: Google Cloud Platform uses dynamic IP allocation, so the specific IP addresses change frequently. Google publishes updated IP ranges regularly - monitor the JSON endpoint for changes.

## Implementation steps

1. Identify your network security solution (Microsoft Entra ID, corporate firewall, etc.)
2. Obtain current IP ranges from [https://www.gstatic.com/ipranges/cloud.json](https://www.gstatic.com/ipranges/cloud.json)
3. Filter for `europe-west3`  entries.
4. Apply the allowlist rules according to your security policy
5. Test the connection after implementing the changes

## Additional resources

- [Google IP Address Ranges](https://support.google.com/a/answer/10026322?hl=en)
- [Current Google Cloud IP Ranges (JSON)](https://www.gstatic.com/ipranges/cloud.json)