Hello,
Our application connects to our backend server, which only allows access from specific IP addresses for security reasons.
We understand that Apple owns the IP range 17.0.0.0/8, but we are unsure whether App Review traffic always originates from this range.
Could you please clarify the following?
-
Does App Review always access backend servers from IP addresses within 17.0.0.0/8?
-
If so, is there a more specific IP range that can be allowlisted instead of the entire 17.0.0.0/8 block?
-
If Apple does not provide a dedicated IP range for App Review, what is the recommended best practice for applications that restrict server access by IP address?
Our goal is to minimize the allowlisted IP range while ensuring that App Review can successfully access our backend during the review process.
Thank you for your guidance.