// CIRCLECI / NFTABLES

CircleCI · nftables

nftables ruleset for CircleCI CIDRs. 47 CIDRs, refreshed daily.

// nftables_circleci_allow.conf

DOWNLOAD ↓ ·

# Circleci IP Ranges
# Updated: 2026-05-26 03:20:46
# Source: https://github.com/rezmoss/cloud-provider-ip-addresses
# License: https://github.com/rezmoss/cloud-provider-ip-addresses/LICENSE
# This file is generated automatically. Do not edit it directly.
# Updates daily at 00:00 UTC
# nftables allow rules for circleci

table inet filter_circleci_allow {
  chain input {
    type filter hook input priority 0; policy drop;
    ip saddr 100.27.248.128/25 accept
    ip saddr 100.29.139.128/25 accept
    ip saddr 98.80.165.0/24 accept
    ip saddr 38.23.41.0/24 accept
    ip saddr 38.23.42.0/24 accept
    ip saddr 38.23.43.0/24 accept
    ip saddr 207.254.116.0/24 accept
    ip saddr 207.254.118.0/24 accept
    ip saddr 18.97.4.0/24 accept
    ip saddr 18.97.6.0/24 accept
    ip saddr 18.97.7.0/24 accept
    ip saddr 38.23.48.0/24 accept
    ip saddr 38.23.49.0/24 accept
    ip saddr 38.23.50.0/24 accept
… (35 more lines)

// nftables_circleci_deny.conf

DOWNLOAD ↓ ·

# Circleci IP Ranges
# Updated: 2026-05-26 03:20:46
# Source: https://github.com/rezmoss/cloud-provider-ip-addresses
# License: https://github.com/rezmoss/cloud-provider-ip-addresses/LICENSE
# This file is generated automatically. Do not edit it directly.
# Updates daily at 00:00 UTC
# nftables deny rules for circleci

table inet filter_circleci_deny {
  chain input {
    type filter hook input priority 0; policy accept;
    ip saddr 100.27.248.128/25 drop
    ip saddr 100.29.139.128/25 drop
    ip saddr 98.80.165.0/24 drop
    ip saddr 38.23.41.0/24 drop
    ip saddr 38.23.42.0/24 drop
    ip saddr 38.23.43.0/24 drop
    ip saddr 207.254.116.0/24 drop
    ip saddr 207.254.118.0/24 drop
    ip saddr 18.97.4.0/24 drop
    ip saddr 18.97.6.0/24 drop
    ip saddr 18.97.7.0/24 drop
    ip saddr 38.23.48.0/24 drop
    ip saddr 38.23.49.0/24 drop
    ip saddr 38.23.50.0/24 drop
… (35 more lines)