Skip to main content

Dedicated IP Addresses

Customers often ask for dedicated IP addresses as a way to whitelist just 2 addresses rather than the Files.com owned IP range for firewall purposes.

Files.com automatically provisions a pair of dedicated IP addresses for every site that has a Primary Custom Domain enabled. These let the site present its certificate to FTPS clients without relying on the client to identify the hostname during TLS setup.

This means that if you have users who restrict outbound access via a firewall, they will only need to whitelist your 2 dedicated IP addresses rather than the Files.com owned IP range (see above).

Custom domains and dedicated IPs are only available on the Power and Enterprise plans.

The site's default dedicated IPs are used for both inbound connections via your Primary Custom Domain and supported outbound connections, including Remote Servers used for Sync and Remote Server Mount, and your custom SMTP server if you use one. A Remote Server can instead select a Custom Domain's outbound addresses.

Additional Custom Domains can each receive a separate set of one or two dedicated addresses through Add Dedicated IPs. These addresses serve inbound connections to that domain, including its own FTPS certificate and SFTP host keys. Eligible addresses can also serve outbound Remote Server connections when that domain is selected for the connection. The allocation allowance is shared across the Parent Site and its Child Sites.

Files.com does not offer IPv6 addresses for dedicated addresses.

Dedicated IP Addresses With Files.com-Provided SSL Certificates

When you use a Files.com-provided SSL certificate with your Primary Custom Domain, inbound connections to your default account subdomain ([SUBDOMAIN].files.com) address will also use your site's dedicated IPs because your Primary Custom Domain uses a CNAME pointing at the default subdomain address.

Dedicated IP Addresses With Your Own SSL Certificates

When using your own SSL certificate with your Primary Custom Domain, inbound connections to the Files.com subdomain address ([SUBDOMAIN].files.com) will use the Files.com general IP pool of IP addresses. Inbound connections to your Primary Custom Domain (yoursubdomain.yourcompany.com) will use your site's dedicated IP addresses.

Dedicated IP Addresses For Outbound Connections from Files.com

Remote Servers can use the site's default dedicated addresses, a selected Custom Domain's eligible outbound addresses, or the Files.com general IP pool. Dedicated-IP routing applies to supported connections for both Sync and Remote Server Mount. Selecting a domain lets each connection use the addresses its counterparty accepts. Give the counterparty every outbound address shown for the selection; see IP Addresses Used For Connection for configuration and Workspace availability.

However, you can disable the use of your dedicated IP in these circumstances if you need to. You might do that if your counterparty has already whitelisted the main Files.com IP range, for example.

Email sent through a custom SMTP server also uses your dedicated IP addresses by default. You can switch it to the general IP pool in your Custom SMTP settings.

We do not use your dedicated IP addresses for other types of outbound connections such as webhooks or LDAP. If you have a need for webhooks or LDAP to originate from a dedicated IP address, let us know about your use case.

Static IP Addresses

Dedicated IP addresses are exclusive to your Files.com site and act as effectively static IP addresses, unless you remove your custom domain or change your site's primary storage region.

We work to keep your dedicated IPs unchanged, and dedicated IPs for our customers have remained the same for the past several years. If we ever have to change your IP addresses, we will provide advance notice.

You can retrieve your site's allocated addresses with the CLI. The Dedicated IP Addresses for This Domain column in the Custom Domains table shows each additional domain's allocated addresses. For outbound Remote Server allowlists, use the Outbound IP Addresses column, which contains only addresses eligible for outbound use. The Remote Server's details page also shows the selected domain's outbound addresses under Connection Routing.

Dedicated IP Addresses Are Region Specific

If you change the primary region where files are hosted on your Files.com site, we will issue you new IP addresses in the new region and release your old IP addresses.

How To Get Dedicated IPs

To receive dedicated IP addresses for your site, set up a Primary Custom Domain. Allocate addresses for additional domains separately from the Custom Domains table. Creating an additional domain or its certificate does not allocate addresses automatically.

Deactivating A Custom Domain

If you remove a custom domain from your site, the dedicated IPs associated with that custom domain are removed from active use and are no longer associated with your site.

Deleting an additional Custom Domain releases that domain's addresses. Other domains on the site retain their own allocations.

When you remove the Primary Custom Domain, users can still connect using your subdomain.files.com address as the host, but your subdomain will no longer resolve to the 2 IP addresses that were dedicated to the Primary Custom Domain.

After your custom domain is deactivated, your subdomain will resolve to an IP address from the general pool. Those users who require whitelisting in their local network firewalls or elsewhere will need to cover the Files.com owned IP range to ensure that they have consistent connection results. A single firewall rule covering the range allows all Files.com traffic.