Firewall infrastructure filtering

To access the Monitoring endpoints on this page, you might need to define a firewall rule in your infrastructure. Some users maintain a list of trusted IP addresses or domains that are permitted to access a network or service. IP allowlisting restricts access to specific IP addresses, while domain allowlisting restricts access to specific domains or subdomains. This helps improve security by only allowing traffic from known safe sources and blocking others. If your infrastructure layout uses this filtering, you will need to use the IP and domain address information provided to set up those filters properly.

Endpoint IP address changes

These IP addresses are static, but do change occasionally as infrastructure service hosting adjustments are made. IP address changes are taking place in 2025. These changes need to be added to infrastructure allowlists that users have in place to avoid service disruptions. (*) in the endpoint section tables indicate new IP addresses for endpoint connections. These new IP addresses are already available and they can all be added to any allowlists you have for all the MZRs in your infrastructure. The existing IP addresses listed for each MZR will be removed on the dates in the schedule table. Be sure to keep the current IP addresses in the allowlist, until the noted date, after which they can be removed.

See the Endpoint IP address change schedule for the roll out plan.

Web UI endpoints

The following table lists the endpoints that are available per region:

REST API endpoints

Collector endpoints

Collector endpoints are ingestion endpoints that you can use to send data.

Prometheus Remote Write ingestion endpoints

IBM Cloud Monitoring deprecated Prometheus client support of endpoints in the form https://ingest.<region> and https://ingest.private.<region> and replaced them with new endpoints on 31 May 2024. End of support for the old endpoints is 31 August 2024. After that date, the old endpoints will stop working. Customers using Prometheus Remote Write need to migrate to use the new endpoints by 31 August 2024 to continue using Prometheus Remote Write.

The following table lists the public Monitoring ingestion endpoints that you can configure to collect metrics via Prometheus Remote Write:

The following table lists the private Monitoring ingestion endpoints that you can configure to collect metrics via Prometheus Remote Write:

Subnets for webhook notifications from IBM Cloud Monitoring

Endpoint IP address change schedule

This is the planned roll out for the IP address changes in 2025. All new IP addresses in the endpoint section tables marked by (*) are already available for each MZR, and can be added to any allowlists in your infrastructure.

This table lists the "Target Date" for cutover to using only the new IP addresses for any allowlist changes that are required. When the status has changed to "Completed", you can remove old IP addresses from any allowlists.

Any date listed that is "to be determined" (TBD) has not been finalized. However, the new IP addresses can and should be added to your allowlists now, or any time before the "Target Date", to avoid disruptions.