TrueFoundry

IP ranges

Outbound addresses TrueFoundry uses when it connects to your systems. Allowlist these if you restrict inbound access to your model endpoints, webhooks, databases, or private APIs.

Download

Which hostname to allowlist

Find the gateway you connect to in the globally distributed SaaS gateway docs. nat_ips on that hostname is the full allowlist, including the documented fallback region.

HostnameAddresses from
gateway.truefoundry.aiEvery regional gateway
us.gateway.truefoundry.aiNorth Virginia, San Francisco, Dallas, and Toronto
eu.gateway.truefoundry.aiLondon, Madrid, Gavle, and Doha
sa.gateway.truefoundry.aiSao Paulo
au.gateway.truefoundry.aiSydney, Melbourne, and Singapore
as.gateway.truefoundry.aiMumbai, Singapore, Doha, and Melbourne

When addresses change

A new address is announced in a GitHub Release and starts carrying traffic 15 days later. Allowlist it during those 15 days. When an address is removed, drop it after that release. Pin a version from the release assets instead of these always-latest files.