We're upgrading the load balancing infrastructure in front of the Wpay/Gr4vy platform, giving us more advanced traffic management and routing capabilities as well as helping with the resilience and performance of the traffic.
As part of this upgrade, the IP addresses that Gr4vy's hostnames resolve to are changing.
Your endpoints, credentials, and API behaviour are not changing. If you connect to Gr4vy by hostname and don't restrict outbound traffic by IP address, no action is needed.
Who needs to act
You need to act if any of the following apply to your integration:
- You maintain an outbound firewall or egress allowlist that permits traffic to Gr4vy by IP address
- You have hardcoded Gr4vy IP addresses in configuration, proxy rules, or connection settings
- Your network or security team operates a web proxy or NAT gateway with destination IP restrictions
If you're unsure, please forward this to whoever manages your network or cloud firewall rules.
What you need to do
- Add the new IP addresses to your allowlist alongside the existing ones, before the 13th October 2026. Don't remove the old addresses yet we'll tell you when it's safe to do that.
- Affected hostnames and addresses for your Gr4vy instances is attached to this thread.
Our recommendation: wherever your tooling supports it, allowlist Gr4vy by hostname (FQDN) rather than by IP address. Our IP addresses may change again in future as we continue to improve the platform's resilience; hostnames will not.
What’s changing:
- The IP addresses that Gr4vy hostnames resolve to
What’s not changing:
- Hostnames and API endpoint URLs
- API request/response behaviour, versions, or authentication
- TLS certificates and supported TLS versions
- The source IP addresses Gr4vy sends webhooks from
- Your API keys, credentials, or configuration
Timeline
- 20th August 2026 - New IP addresses are live and reachable. You can add them to your allowlists from today.
- 15 Sept 2026 - Sandbox environments cut over to the new addresses.
- 29 Sept 2026 - Production environments cut over to the new addresses.
- 13 Oct 2026 - Earliest date the old IP addresses are withdrawn. Please remove them from your allowlists only after this date.
We expect no downtime and no interruption to payment processing. The change is made at the DNS layer, and both sets of addresses serve traffic identically during the transition.
If you have any questions, please contact your Wpay account managers.