Finding "Known Proxies" IPs for DW10 Cloud Environment

Hi,

We are currently configuring Forwarded Headers in the DW10 Admin interface (Settings -> System -> Web & HTTP -> HTTP -> Proxy and load balancing See screenshot below)

To set this up correctly, we need to populate the Known proxies and/or Known networks fields with the internal IP addresses or subnet CIDR blocks of the reverse proxies (e.g., Fortigate firewalls) that route traffic directly to our application nodes in the Dynamicweb Cloud.

How can we find the correct internal connecting IPs or CIDR blocks to enter into these fields? Are there standard IP ranges used across the DW Cloud environment, or is there a specific way to retrieve the exact internal IPs routing to our tenant?

Any guidance on where to find these values would be greatly appreciated!

Thanks in advance.

Hi Ruwan,

For DW Cloud you don't need to fill in Known proxies or Known networks. When those fields are left empty, Dynamicweb automatically trusts all source addresses as a fallback — this is intentional for cloud environments where infrastructure proxy IPs are dynamic and can't be enumerated.

The only time you'd need to fill those fields in is if you have added your own proxy layer on top — for example routing traffic through Cloudflare or your own Fortigate before it reaches DW Cloud. In that case you've chosen that proxy yourself, so you already know the relevant IPs or network ranges to enter.

Recommended configuration for DW Cloud (without an extra proxy layer):

Enable Forwarded Headers — on
Known proxies / Known networks — leave empty
Forward limit — set to the number of proxy hops between the internet and your app (typically 1 for a standard DW Cloud setup)

I am updating the current documentation article on this to better explain these concepts.

BR Nicolai

Developer forum

Finding "Known Proxies" IPs for DW10 Cloud Environment

Replies