Citrix Cloud services use region-specific public IP address ranges for infrastructure communication, including provisioning and management activities such as MCS machine creation.

These IP ranges are published and maintained by Citrix and are subject to change.

Citrix provides official API endpoints that return the current IP allowlist for each supported region. one must configure firewall and security controls to allow outbound and inbound traffic (as applicable) to the IP ranges published at these endpoints.
 

• Japan:  https://api.citrixcloud.jp/connectivity/v1/allowlist

• US, EU, AP-South:  https://api.cloud.com/connectivity/v1/allowlist

• US Government Cloud:  https://api.cloud.us/connectivity/v1/allowlist

Customers are advised to periodically review these endpoints, as IP ranges may change over time. Automation or scheduled reviews should be implemented where possible to ensure continued connectivity for Citrix DaaS services.

Customers are advised to periodically review these endpoints, as IP ranges may change over time.

While configuring Citrix cloud from Citrix systems with public cloud providers such as Microsoft Azure, Amazon Web Services and Google Cloud Platform may require the public IP address ranges used by Citrix Cloud services during Machine Creation Services (MCS) provisioning and management operations.

This requirement is common in environments with strict firewall policies, outbound filtering, or regulatory network controls.