Question 1

What are these IPs?

Accepted Answer

They are the public IP address ranges (CIDR blocks) that Salesforce uses for Hyperforce. Each range covers many IPs used by Salesforce's infrastructure in a given region (e.g. us-east-1, eu-west-2).

Question 2

What is Hyperforce?

Accepted Answer

Hyperforce is Salesforce's architecture that runs on major public clouds (e.g. AWS). Your Salesforce org may run on Hyperforce, which means its traffic can come from these published IP ranges rather than from legacy Salesforce data centers.

Question 3

Why does Salesforce publish them?

Accepted Answer

So customers and partners can allow that traffic through firewalls, VPNs, and security tools. Salesforce publishes a single JSON file (ip-ranges.salesforce.com) that lists all current Hyperforce IP ranges by region.

Question 4

How do companies use these IPs?

Accepted Answer

Teams add these ranges to firewall allowlists, WAF rules, or network policies so that Salesforce traffic is permitted. Without the correct IPs allowed, integrations, logins, or API calls from Salesforce can be blocked or fail.

Question 5

Do I need to allow all of them?

Accepted Answer

It depends on your setup. Some organizations allow the full list; others restrict by region (e.g. only the regions where their org runs). The key is to keep whatever list you use in sync with Salesforce's published list.

Question 6

Why should we monitor these IPs?

Accepted Answer

Salesforce can add or remove ranges over time (new regions, capacity changes, etc.). If your firewall rules are not updated when they change, traffic can start failing. Monitoring tells you when to update so you're not caught off guard.

Question 7

What happens if we don't monitor?

Accepted Answer

If Salesforce adds IPs and you haven't allowed them, new traffic may be blocked. If they remove IPs and you still allow them, you're over-permissive. Worst case: an unexpected change causes outages or security reviews with no clear audit trail of when the list changed.

Question 8

How often does the list change?

Accepted Answer

There's no fixed schedule. Changes happen when Salesforce updates their infrastructure. We check the official list hourly so you see changes within an hour and can act before it becomes a problem.

Question 9

What does hyperforce.watch do?

Accepted Answer

We watch Salesforce's official IP list (the same one they publish) and detect when it changes. We tell you what changed (additions, removals), how serious it is, and give you firewall-ready exports so you can update your rules quickly.

Question 10

How does monitoring work?

Accepted Answer

We fetch the list hourly, compare it to the previous version, and only alert when something actually changed. No per-org polling, no manual checks. One global monitor; you get notified or pull exports when you need them.

Question 11

Why sign up instead of checking the JSON myself?

Accepted Answer

You can, but then you're on the hook for checking regularly, diffing the list, and distributing updates to your team. We do the diffing, severity, and history for you — and with Pro or Team you get Slack or email alerts and one-click CIDR exports so you spend time fixing, not hunting.

Frequently asked questions

What is this?

How are these IPs used?

Why monitor?

How does hyperforce.watch help?

Ready to stay ahead of Hyperforce IP changes?