Why Is Domain Whitelisting Recommended Over IP Whitelisting for the Data API?

Problem

It is recommended that the domain for the Data application programming interface (API) be whitelisted instead of the IP.

info

Information

The need to enable network address translation (NAT) IP forwarding for specific User API and Event API requests may arise, potentially because of errors like a time-out error, network error, and so on.

Explanation

  • MoEngage uses a multi-tenant system, meaning IPs change frequently to support scale and security.
  • The domain api-xx.moengage.com is static, making domain whitelisting more reliable than IP whitelisting.
  • MoEngage APIs use Authentication to validate requests and ensure security.
  • If static IPs are required, a custom implementation at MoEngage is required, which is typically avoided.
  • Do not cache the IP. If you encounter any errors in the response from MoEngage, domain whitelisting should suffice.

Was this article helpful?
0 out of 0 found this helpful

How can we improve this article?