Subscribe to Help Center RSS FeedAs part of our commitment to providing the most reliable and high-performing directory services, JumpCloud is migrating our LDAP (ldap.jumpcloud.com) and LDAP MFA (ldap-mfa.jumpcloud.com) services to AWS Global Accelerator.
What is Changing?
We are transitioning from traditional regional routing to a global "Anycast" network. This migration allows your LDAP traffic to enter the AWS private network at the closest possible point to your infrastructure, bypassing the unpredictability of the public internet.
Phased Rollout Schedule
To ensure stability, we are shifting traffic in increments. We have already migrated a small percentage of global traffic and will continue to increase this percentage over the coming weeks.
During this period, your systems will intermittently resolve to a new set of static IP addresses.
If your firewall restricts outbound traffic, you must take action immediately to avoid intermittent authentication failures. Jump to the following section to learn more.
Action Required: Updating Firewall Allow Lists
If your organization uses egress filtering to restrict outbound traffic on ports 389 (LDAP) or 636 (LDAPS), you must add the new IP addresses to your firewall's allow list.
| Service | Hostname | Required Static IPs |
|---|---|---|
| LDAP | ldap.jumpcloud.com | 166.117.75.106, 166.117.180.152 |
| LDAP-MFA | ldap-mfa.jumpcloud.com | 15.197.212.115, 166.117.213.171 |
Do not remove the old JumpCloud IP addresses until the migration is 100% complete. During the phased rollout, your traffic may alternate between the old and new infrastructure. We will send an update when this migration is complete in order for you to clean up the old IPs.
Why Action is Required
As the migration percentage increases, your authentication requests will eventually hit the new IP addresses. If your firewall blocks these IPs, your LDAP-bound applications (such as VPNs, NAS devices, or legacy apps) will be unable to authenticate users, possibly resulting in a service disruption for your organization.
In this Article