# Canva - Full IP List

<div class="lia-message-subject" id="bkmrk-canvas-domain%2C-email">Canvas Domain, Email, and Server Management</div>This document lists the domains and IP addresses used in various areas of Canvas.

<div class="lia-message-body-wrapper lia-component-message-view-widget-body" id="bkmrk-"><div class="lia-message-body" itemprop="text"><div class="lia-message-body-content">---

</div></div></div>Many K12 schools and some higher education institutions need to restrict the websites that students can visit while on campus and want to manage Canvas’ resources.

Future changes may require additional configurations. Institutions that use Canvas domain, email, or server resource management should thoroughly test their firewalls to avoid instability.

## **Canvas Core Domains**

Whenever possible, Canvas uses a subdomain of &lt;domain&gt;.instructure.com to host additional resources. This behavior allows institutions to allow \*.instructure.com and cover a range of services that Canvas provides.

Some of the built-in functionality of Canvas is accessed via a separate URL that will also need to be allowed:

**Browser Security**

<div class="lia-message-body-wrapper lia-component-message-view-widget-body" id="bkmrk-%2A.canvas-user-conten"><div class="lia-message-body" itemprop="text"><div class="lia-message-body-content">- \*.canvas-user-content.com

</div></div></div>**Canvas Guides**

<div class="lia-message-body-wrapper lia-component-message-view-widget-body" id="bkmrk-%2A.canvaslms.com"><div class="lia-message-body" itemprop="text"><div class="lia-message-body-content">- \*.canvaslms.com

</div></div></div>**Canvas Images/File Storage (except Media)**

<div class="lia-message-body-wrapper lia-component-message-view-widget-body" id="bkmrk-%2A.inscloudgate.net%2F-"><div class="lia-message-body" itemprop="text"><div class="lia-message-body-content">- \*.inscloudgate.net/
- instructure-uploads.s3.amazonaws.com
- instructure-uploads-2.s3.amazonaws.com
- instructure-uploads-eu.s3.amazonaws.com
- instructure-uploads-apse1.s3.amazonaws.com
- instructure-uploads-apse2.s3.amazonaws.com
- instructure-uploads-fra.s3.amazonaws.com
- instructure-uploads-pdx.s3.amazonaws.com
- Instructure-uploads-yul.s3.amazonaws.com

</div></div></div>**Canvas Media Storage**

<div class="lia-message-body-wrapper lia-component-message-view-widget-body" id="bkmrk-%2A.instructuremedia.c"><div class="lia-message-body" itemprop="text"><div class="lia-message-body-content">- \*.instructuremedia.com
- notorious-prod.s3.amazonaws.com
- notorious-prod-apse1.s3.amazonaws.com
- notorious-prod-apse2.s3.amazonaws.com
- notorious-prod-eu.s3.amazonaws.com
- notorious-prod-fra.s3.amazonaws.com
- notorious-prod-pdx.s3.amazonaws.com
- notorious-prod-yul.s3.amazonaws.com

</div></div></div>**Conferences - BigBlueButton basic integration**

<div class="lia-message-body-wrapper lia-component-message-view-widget-body" id="bkmrk-%2A.blindsidenetworks."><div class="lia-message-body" itemprop="text"><div class="lia-message-body-content">- \*.blindsidenetworks.com

</div></div></div>**DocViewer**

<div class="lia-message-body-wrapper lia-component-message-view-widget-body" id="bkmrk-canvadocs.instructur"><div class="lia-message-body" itemprop="text"><div class="lia-message-body-content">- canvadocs.instructure.com

</div></div></div>**Gravatar Images (Profile Pictures)**

<div class="lia-message-body-wrapper lia-component-message-view-widget-body" id="bkmrk-%2A.gravatar.com"><div class="lia-message-body" itemprop="text"><div class="lia-message-body-content">- \*.gravatar.com

</div></div></div>**Office 365 Integration**

<div class="lia-message-body-wrapper lia-component-message-view-widget-body" id="bkmrk-office365-iad-prod.i"><div class="lia-message-body" itemprop="text"><div class="lia-message-body-content">- office365-iad-prod.instructure.com

</div></div></div>**Google Docs Integration**

<div class="lia-message-body-wrapper lia-component-message-view-widget-body" id="bkmrk-docs.google.com"><div class="lia-message-body" itemprop="text"><div class="lia-message-body-content">- docs.google.com

</div></div></div>**Google Drive Integration**

<div class="lia-message-body-wrapper lia-component-message-view-widget-body" id="bkmrk-drive.google.com"><div class="lia-message-body" itemprop="text"><div class="lia-message-body-content">- drive.google.com

</div></div></div>**Import Scripts and Canvas Resources**

<div class="lia-message-body-wrapper lia-component-message-view-widget-body" id="bkmrk-%2A.cloudfront.net"><div class="lia-message-body" itemprop="text"><div class="lia-message-body-content">- \*.cloudfront.net

</div></div></div>**Rich Content Editor Math Equations**

<div class="lia-message-body-wrapper lia-component-message-view-widget-body" id="bkmrk-instructure.codecogs"><div class="lia-message-body" itemprop="text"><div class="lia-message-body-content">- instructure.codecogs.com

</div></div></div>**Support Help**

<div class="lia-message-body-wrapper lia-component-message-view-widget-body" id="bkmrk-%2A.canvaslms.com-1"><div class="lia-message-body" itemprop="text"><div class="lia-message-body-content">- \*.canvaslms.com

</div></div></div>## **Quizzes and Outcomes Domains**

Quizzes and Outcomes URLs follow a similar pattern to Canvas URLs with the addition of the Amazon Web Services (AWS) region (IAD, PDX, YUL, DUB, FRA, SYD, SIN). Also, Quizzes has two application URLs instead of just one.

For institutions unsure about which region to use for an account, please contact Canvas Support or a Customer Success Manager.

<div class="lia-message-body-wrapper lia-component-message-view-widget-body" id="bkmrk-kinesis.%2A.amazonaws."><div class="lia-message-body" itemprop="text"><div class="lia-message-body-content">- kinesis.\*.amazonaws.com
- \*.cloudfront.net
- \*.learnosity.com
- \*.quiz-api-&lt;region&gt;-prod.instructure.com
- \*.quiz-lti-&lt;region&gt;-prod.instructure.com
- \*.quiz-api-&lt;region&gt;-beta.instructure.com
- \*.quiz-lti-&lt;region&gt;-beta.instructure.com
- \*.outcomes-&lt;region&gt;-prod.instructure.com

</div></div></div>## **Email Notification IP Addresses**

SMTP allows any computer to send email claiming to be from any source address. Spammers and phishing often use this to forge email addresses, making it more difficult to trace a message back to its sender and easy for spammers to hide their identity in order to avoid responsibility; they even dupe users into disclosing private information in response to an email.

## **Verification Systems**

Canvas uses SPF, which is an email validation system designed to prevent email SPAM and phishing by detecting and preventing email spoofing. SPF allows administrators to specify which hosts (IP addresses, computers) are allowed to send mail from a given domain by creating specific SPF records in the DNS. Mail exchangers then use the DNS to verify mail from a given domain is being sent by a sanctioned host.

Canvas also uses DomainKeys Identified Mail (DKIM) to sign mail. DKIM associates our domain name to an email message, thereby allowing Canvas to claim responsibility for the message (sign the message). The digital signature is validated by recipient. Responsibility is claimed by a signer (instructure.com), independently of the message's actual authors or recipients, by adding a DKIM-Signature: field to the message's header. The verifier recovers the signer's public key using the DNS, and then verifies that the signature matches the actual message's content.

If customers cannot receive email notifications from Canvas, emails are typically being sent to the Spam folder. To correct this behavior, update spam settings to allow emails from instructure.com.

## **Email IP Addresses**

If needed, institutions can allow all static Canvas Email IP addresses.

When Email IP addresses are allowlisted, the entire list of IP addresses should be allowlisted. The variety of IP addresses ensure a specific IP is not overloaded and activity can be distributed across various data centers as needed. This recommendation also applies to adding international IP addresses as well.

**Note:** The IP list may be updated at any time.

**Customers hosted in Canada**  
99.79.19.152  
52.60.179.121  
23.249.209.14  
23.249.209.15

**Customers hosted in Ireland (DUB) or Frankfurt (FRA)**  
54.240.89.126  
54.240.89.127  
54.240.89.128  
54.240.89.129  
54.240.89.130

**Customers hosted in Singapore (SIN) or Sydney (SYD)**  
69.169.235.184  
69.169.235.186  
69.169.235.185

**Customers hosted in Virginia (IAD) or Oregon (PDX)**  
23.249.221.108  
23.249.221.109  
23.249.221.110  
23.249.221.111  
23.249.221.112  
23.249.221.113  
23.249.221.114  
23.249.221.115  
23.249.221.116  
23.249.221.117  
23.249.221.118  
23.249.221.119  
23.249.221.120  
23.249.221.121  
23.249.221.122  
23.249.221.123  
23.249.221.124  
23.249.221.125  
23.249.221.126  
23.249.221.127  
54.240.<span class="diff-html-added">127</span>.<span class="diff-html-removed">1</span><span class="diff-html-added">59</span>  
54.240.<span class="diff-html-added">127.60</span>  
<span class="diff-html-added">54.240.127.61</span>  
<span class="diff-html-added">54.240.127.62</span>  
<span class="diff-html-added">54.240.127.63</span>  
<span class="diff-html-added">54.240.127.64</span>  
<span class="diff-html-added">54.240.127.65</span>  
<span class="diff-html-added">54.240.127.66</span>  
<span class="diff-html-added">54.240.127.67</span>  
<span class="diff-html-added">54.240.127.68</span>  
<span class="diff-html-added">54.240.14.1</span>  
54.240.14.100  
54.240.14.102  
54.240.14.103  
54.240.14.105  
54.240.14.107  
54.240.14.128  
54.240.14.130  
54.240.14.131  
54.240.14.139  
54.240.14.154  
54.240.14.188  
54.240.14.198  
54.240.14.199  
54.240.<span class="diff-html-added">14.2</span>  
<span class="diff-html-added">54.240.</span>38.184  
54.240.38.185  
54.240.38.186  
54.240.38.187  
54.240.38.188  
23.249.221.12/32  
23.249.221.202/32  
54.240.68.117/32  
54.240.68.118/32  
54.240.68.119/32  
54.240.68.120/32  
54.240.68.121/32  
54.240.68.123/32  
54.240.76.81/32  
54.240.76.83/32  
54.240.76.85/32  
54.240.76.87/32  
54.240.76.88/32  
54.240.76.92/32  
54.240.76.96/32

[**Full list pulled via SPF on (12-10-24)**](https://dmarcian.com/spf-survey/?domain=canva.com)

103.151.192.0/23  
108.177.8.0/21  
108.177.96.0/19  
108.179.144.0/20  
130.211.0.0/22  
139.180.17.0/24  
141.193.184.128/25  
141.193.184.32/27  
141.193.184.64/26  
141.193.185.128/25  
141.193.185.32/27  
141.193.185.64/26  
143.244.80.0/20  
148.105.8.0/21  
158.247.16.0/20  
159.112.242.162/32  
159.135.228.10/32  
166.78.68.221/32  
167.89.46.159/32  
167.89.64.9/32  
167.89.65.0/32  
167.89.65.100/32  
167.89.65.53/32  
167.89.74.233/32  
167.89.75.126/32  
167.89.75.136/32  
167.89.75.164/32  
167.89.75.33/32  
172.217.0.0/19  
172.217.128.0/19  
172.217.160.0/20  
172.217.192.0/19  
172.217.32.0/20  
172.253.112.0/20  
172.253.56.0/21  
173.194.0.0/16  
18.208.124.128/25  
185.12.80.0/22  
188.172.128.0/20  
192.161.144.0/20  
192.237.159.42/32  
192.237.159.43/32  
198.2.128.0/18  
198.2.128.0/24  
198.2.132.0/22  
198.2.136.0/23  
198.2.145.0/24  
198.2.177.0/24  
198.2.178.0/23  
198.2.180.0/24  
198.2.186.0/23  
199.127.232.0/22  
199.255.192.0/22  
205.201.128.0/20  
205.201.131.128/25  
205.201.134.128/25  
205.201.136.0/23  
205.201.139.0/24  
206.55.144.0/20  
209.85.128.0/17  
216.139.64.0/19  
216.198.0.0/18  
216.221.160.0/19  
216.239.32.0/19  
216.58.192.0/19  
23.249.208.0/20  
23.251.224.0/19  
23.251.237.159/32  
23.251.237.160/29  
23.251.237.168/30  
23.253.182.103/32  
23.253.183.145/32  
23.253.183.146/32  
23.253.183.147/32  
23.253.183.148/32  
23.253.183.150/32  
3.210.190.0/24  
3.93.157.0/24  
35.190.247.0/24  
35.191.0.0/16  
54.174.52.0/24  
54.174.57.0/24  
54.174.59.0/24  
54.174.60.0/23  
54.174.63.0/24  
54.240.0.0/18  
54.240.64.0/19  
54.240.96.0/19  
64.233.160.0/19  
66.102.0.0/20  
66.249.80.0/20  
69.169.224.0/20  
72.14.192.0/18  
74.125.0.0/16  
76.223.128.0/19  
76.223.176.0/20

## **LDAP**

Most LDAP servers are not publicly available and are protected by firewalls. Canvas admins can create an allowed list of firewall exceptions to connect to their LDAP server. Canvas designates a set of servers and their associated static IP addresses to simplify these firewall exception rules.

For institutions unsure about which region to use for an account, please contact Canvas Support or a Customer Success Manager.

**Note:** The IP list may be updated at any time.

**CANADA** 52.60.71.96 prod ca-central-1a  
52.60.54.125 prod ca-central-1b  
52.60.193.95 nonprod ca-central-1a  
52.60.42.222 nonprod ca-central-1b

**FRANKFURT** 52.29.85.26 = nat1 (prod) eu-central-1a  
52.29.84.246 = nat2 (prod) eu-central-1b  
18.185.69.114 = nat3 (prod) eu-central-1c  
52.29.95.79 = nat1 (nonprod) eu-central-1a  
52.29.119.13 = nat2 (nonprod) eu-central-1b  
18.184.239.128 = nat3 (nonprod) eu-central-1c

**IRELAND**  
46.51.199.181 = nat1-a (prod) eu-west-1a  
46.51.199.184 = nat1-b (prod) eu-west-1b  
46.51.199.187 = nat1-c (prod) eu-west-1c  
54.229.62.101 = nat1 (nonprod) eu-west-1a  
54.229.61.11 = nat2 (nonprod) eu-west-1b  
54.229.62.136 = nat3 (nonprod) eu-west-1c

**OREGON**  
50.112.155.19 = nat1 (prod) us-west-2a  
50.112.155.17 = nat2 (prod) us-west-2b  
50.112.138.16 = nat3 (prod) us-west-2c  
34.212.202.226 = nat1 (nonprod) us-west-2a  
54.70.178.34 = nat2 (nonprod) us-west-2b  
34.210.5.133 = nat3 (nonprod) us-west-2c

**<span class="diff-html-added">SINGAPORE</span>**  
<span class="diff-html-added">54</span>.<span class="diff-html-added">255</span>.<span class="diff-html-added">173</span>.<span class="diff-html-added">119 </span>= nat1<span class="diff-html-removed"> </span>(<span class="diff-html-added">prod</span>) <span class="diff-html-added">ap</span>-<span class="diff-html-added">southeast</span>-<span class="diff-html-added">1a</span>  
54.255.173.249 = nat2 (prod) ap-southeast-1b  
<span class="diff-html-added">52</span>.<span class="diff-html-added">74.</span>23.<span class="diff-html-added">74 = nat3 (prod) ap-southeast-1c</span>  
<span class="diff-html-added">54.255.177.29 = nat1 (nonprod) ap-southeast-1a</span>  
52.77.73.203 = nat2 (nonprod) ap-southeast-1b

54.179.60.151 = nat3 (nonprod) ap-southeast-1c

**<span class="diff-html-added">SYDNEY</span>**  
  
54.79.101.198 = nat1 (prod) ap-southeast-2a

<span class="diff-html-added">54.79.104.239 = nat2 (prod) ap-southeast-2b</span>

<span class="diff-html-added">54.206.13.66 = nat3 (prod) ap-southeast-2c</span>

<span class="diff-html-added">54.79.80.35 = nat1 (nonprod) ap-southeast-2a</span>

<span class="diff-html-added">13</span>.<span class="diff-html-added">55</span>.<span class="diff-html-added">54</span>.<span class="diff-html-added">243 </span>= <span class="diff-html-added">nat2 </span>(<span class="diff-html-added">nonprod</span>) ap-southeast-<span class="diff-html-added">2b</span>  
54.<span class="diff-html-added">66</span>.<span class="diff-html-added">224</span>.<span class="diff-html-added">5 </span>= <span class="diff-html-added">nat3 </span>(<span class="diff-html-added">nonprod</span>) ap-southeast-<span class="diff-html-added">2c</span>

**<span class="diff-html-added">VIRGINIA</span>**  
  
<span class="diff-html-added">184</span>.<span class="diff-html-added">72</span>.<span class="diff-html-added">117</span>.<span class="diff-html-added">210 </span>= <span class="diff-html-added">nat1-b </span>(<span class="diff-html-added">canvasprod</span>) <span class="diff-html-added">us</span>-<span class="diff-html-added">east</span>-<span class="diff-html-added">1b</span>  
<span class="diff-html-added">107.23.48.136 </span>= nat1<span class="diff-html-added">-c </span>(<span class="diff-html-added">canvasprod</span>) <span class="diff-html-added">us</span>-<span class="diff-html-added">east</span>-<span class="diff-html-added">1c</span>  
<span class="diff-html-added">107</span>.<span class="diff-html-added">23</span>.<span class="diff-html-added">49</span>.<span class="diff-html-added">116 </span>=<span class="diff-html-removed"> </span><span class="diff-html-added">nat1-e </span>(<span class="diff-html-added">canvasprod</span>) <span class="diff-html-added">us</span>-<span class="diff-html-added">east</span>-<span class="diff-html-added">1e</span>  
<span class="diff-html-added">107</span>.<span class="diff-html-added">21</span>.<span class="diff-html-added">12</span>.<span class="diff-html-added">41 </span>= <span class="diff-html-added">nat1 </span>(<span class="diff-html-added">test/beta</span>) <span class="diff-html-added">us</span>-<span class="diff-html-added">east</span>-<span class="diff-html-added">1</span>  
54.208.19.142 = nat1 (futureprod) us-east-1b

54.208.31.242 = nat2 (futureprod) us-east-1c

54.208.28.84 = nat3 (futureprod) us-east-1e

54.208.2.214 = nat1 (futurenonprod) us-east-1b

54.208.5.44 = nat2 (futurenonprod) us-east-1c

54.208.27.95 = nat3 (futurenonprod) us-east-1e

**SHARED SFTP (PDX)**  
52.41.151.176 us-west-2a  
35.164.144.191 us-west-2b  
54.71.241.59 us-west-2c