Static IP egress

Static IP egress gives your Avrea organization one stable public IPv4 address for outbound traffic from runner VMs. You can add that address to external allowlists once, instead of tracking the changing addresses of individual runners.

This is useful when workflows connect to systems that restrict access by source IP, such as:

• Production and staging databases.
• Cloud services and private APIs.
• Payment, signing, and deployment providers.
• Corporate firewalls, VPN gateways, and SaaS allowlists.

The IP applies across the organization's repositories and runner VMs, making network policy easier to review and maintain as your CI usage scales.

Enable static IP egress

You need an Admin role in the organization.

1. In the Avrea console, open your organization.
2. Go to Settings → Static IP.
3. Enable Static-IP egress.
4. Wait for the status to change from Pending to Active. Allocation usually completes within a minute; refresh the page to check again.
5. Copy the displayed IPv4 address.
6. Add the address to the source-IP allowlist for each external service your workflows need to reach.

New workflow jobs use the organization's static IP automatically. No workflow or application configuration is required in Avrea.

Roll out safely

Add the new address to external allowlists before removing any existing temporary rules. Run a workflow that connects to each protected service, then remove the old entries.

Scope and behavior

• The organization receives one public IPv4 address, shared by its Avrea runner VMs.
• The address is used for outbound connections to the public internet.
• Static IP egress does not create an inbound endpoint or make runners reachable from the internet.
• Any egress firewall rules configured in Avrea and the destination service's own authentication still apply.

Because workflows share the address, external services can identify traffic as coming from your Avrea organization, but not from a particular repository or job. Continue to use application credentials and least-privilege permissions for authorization.

Availability and pricing

Static IP egress is available with Avrea Enterprise. See avrea.com/pricing or contact the Avrea team for current terms. Any static IP charges appear on the organization's invoice; see Billing for invoice and payment details.

Disable static IP egress

Before disabling the feature, make sure workflows no longer depend on the address:

1. Update or remove the corresponding entries in external allowlists.
2. Go to Settings → Static IP.
3. Turn off Static-IP egress.

Disabling the feature releases the address. If you enable it again later, your organization may receive a different IP, so always copy the currently active address from the console.

For help with allowlist changes or allocation status, contact support@avrea.com.