How do I whitelist Wasabi service URLs in my firewall?

Wasabi is periodically asked how to whitelist Wasabi service URLs in order to make firewall exceptions. When possible in firewall settings, we always recommend whitelisting the Wasabi service URL itself (i.e. s3.wasabisys.com) as it is more dynamic than attempting to whitelist all IPs that resolve to a specific address/URL.  Wasabi does not publish our IP addresses because as our service scales, we are continually adding new IPs to the range of IPs used for a service URL. 

This is why it is recommended to whitelist the URL itself; whitelisting the IPs can eventually result in issues reaching a Wasabi storage region and the list of IPs in the firewall exception may have to be occasionally updated. However, if you must make a firewall exception using IP addresses specifically, you can determine the current IP addresses that are being used by performing a nslookup command from the command line like shown below.

Note that this example uses the us-east-1 Wasabi storage region URL. For other Wasabi storage region IPs, please use the appropriate Wasabi service URL as described in this article.

% nslookup s3.wasabisys.com

Server:  192.168.1.1
Address: 192.168.1.1#53

Non-authoritative answer:
Name: s3.wasabisys.com
Address: 38.27.106.51
Name: s3.wasabisys.com
Address: 38.27.106.53