Prepare for an outbound IP address change

If you received a notification that the outbound IP addresses of your Azure App Service app are changing, follow these instructions.

Determine if you need to do anything

  • Option 1: If your App Service app doesn't use IP filtering, an explicit inclusion list, or special handling of outbound traffic such as routing or firewall, no action is required.

  • Option 2: If your app does have special handling for the outbound IP addresses (see the following examples), add the new outbound IP addresses wherever the existing ones appear. Don't replace the existing IP addresses. You can find the new outbound IP addresses by following the instructions in the next section.

    For example, an outbound IP address might be explicitly included in a firewall outside your app, or an external payment service might have an allowed list that contains the outbound IP address for your app. If your outbound address is configured in a list anywhere outside your app, your outbound address needs to change.

Find the outbound IP addresses in the Azure portal

The new outbound IP addresses are shown in the portal before they take effect. When Azure starts using the new ones, the old ones are no longer used. Only one set at a time is used, so entries in inclusion lists must have both old and new IP addresses to prevent an outage when the switch happens.

  1. Open the Azure portal.

  2. In the sidebar menu, select App Services.

  3. Select your App Service app from the list.

  4. If the app is a function app, see Function app outbound IP addresses.

  5. Under Settings in the sidebar menu, select Networking, and then find the section labeled Outbound addresses.

  6. Copy the IP addresses, then add them to your special handling of outbound traffic such as a filter or allowed list. Don't delete the existing IP addresses in the list.