Shipfox Runners
Static IP runners
Allowlist Shipfox runners by assigning them static IPs
Many CI pipelines connect to external services, such as databases, APIs, or internal tools, that restrict access by IP.
With static IPs, you can safely allowlist Shipfox runners without exposing your infrastructure.
How it Works
When static IP is enabled, all traffic from your runners is routed through a dedicated WireGuard tunnel to a NAT gateway with a fixed, public IP address.
- Each organization gets a private, encrypted tunnel
- Network traffic is fully isolated from other customers
- The static IP is shared across all runners in your organization
This setup ensures predictable, secure access to your protected services, ideal for private APIs, self-hosted services, and firewalled environments.
Pricing & setup
Static IPs are available for $50/month per IP.
To enable static IPs for your organization, get in touch with us. Setup is fast, and doesn't require any changes to your workflows.