Ubuntu/Canonical IP Ranges

Support and Help
1

Good evening

Where can I find an up to date list of all of the Ubuntu, LXD, Snapcraft & Canonical IP Ranges?

Best regards and happy new year

Daniel

2

Based on my knowledge, Canonical/Ubuntu do not publish a single, up-to-date, official list of IP ranges covering Ubuntu, LXD, Snapcraft, etc.

What is officially documented are the service hostnames / domains (for example in Snapcraft’s network requirements), because most of these services use CDNs and cloud infrastructure where IP addresses can and do change.

So the recommended approach is to:

  • Allow access by DNS hostnames rather than fixed IP ranges, or
  • Resolve the required hostnames dynamically if IP-based rules are unavoidable.
3

Thanks for your reply @MesterPerfect

It is my understanding that Canonical operates one or more ASN, which if true would mean it is possible to know which ip ranges are being used.

Regarding the domain names, do you have a resource where they are all documented?

4

After doing some research, here’s what I found:

Yes, Canonical does operate its own ASN(s) (for example AS41231), so it’s technically possible to derive some IP ranges via public ASN/BGP databases. However, Canonical does not publish an official, complete, and maintained list of IP ranges, and not all Canonical-related services are guaranteed to be served exclusively from those ASNs (CDNs and third-party infrastructure are used).

Regarding domain names, there is also no single consolidated document listing all Canonical/Ubuntu/Snap/LXD domains. Instead, they are documented per service, for example:

  • Snap / Snapcraft: documented network endpoints (hostnames) in the Snapcraft docs
  • Ubuntu Pro / Landscape: separate, service-specific documentation

Because of this, Canonical generally recommends allowing access by documented hostnames (DNS) rather than relying on fixed IP ranges, which may change over time.

In short:

  • ASN data can help, but it’s not authoritative or complete
  • Hostnames are documented, but only per service, not centrally

https://www.netify.ai/resources/hostnames/canonical-bos01.cdn.snapcraftcontent.com

5

Let’s be clear here.

Only somebody from Canonical can authoritatively answer @dwd-daniel’s question.

This is community support. We can say that this-tool or that-tool might get you there, and that’s well-intentioned community speculation. Community support volunteers do not have access to unpublished internal Canonical data and cannot authoritatively answer the question.

If you really need the answer, this question seems better addressed to Canonical’s IS department.

3 Likes