App Review IP address range for server allowlisting

Question

Created Jul ’26

Replies 1

Boosts 1

Participants 1

Hello,

Our application connects to our backend server, which only allows access from specific IP addresses for security reasons.

We understand that Apple owns the IP range 17.0.0.0/8, but we are unsure whether App Review traffic always originates from this range.

Could you please clarify the following?

Does App Review always access backend servers from IP addresses within 17.0.0.0/8?
If so, is there a more specific IP range that can be allowlisted instead of the entire 17.0.0.0/8 block?
If Apple does not provide a dedicated IP range for App Review, what is the recommended best practice for applications that restrict server access by IP address?

Our goal is to minimize the allowlisted IP range while ensuring that App Review can successfully access our backend during the review process.

Thank you for your guidance.

Answer 1

torinikuoishii OP

Jul ’26

Hello,

We have one additional question regarding network allowlisting for App Review.

We understand that Apple owns the IP range 17.0.0.0/8. However, from a security perspective, we would like to minimize the scope of our allowlist as much as possible.

Could you please clarify the following?

Is there an FQDN (Fully Qualified Domain Name) that App Review traffic uses and that can be allowlisted instead of IP addresses?

If not, can you confirm that IP allowlisting using 17.0.0.0/8 is the only supported approach for applications that restrict backend access?

If there are any other recommended best practices for securely allowing App Review access, we would greatly appreciate your guidance.

Thank you for your assistance.