From a10899f1f111f6eabeb382244640179e7f8965ae Mon Sep 17 00:00:00 2001 From: Isaac Brown <101839405+isaacmbrown@users.noreply.github.com> Date: Thu, 18 Dec 2025 15:35:41 +0000 Subject: [PATCH] Add Japan as supported region for data residency (#58859) Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com> --- .../network-details-for-ghecom.md | 85 +++++++++---------- .../about-githubs-ip-addresses.md | 8 +- ...for-a-migration-between-github-products.md | 4 +- .../when-you-adopt-data-residency.md | 1 + 4 files changed, 45 insertions(+), 53 deletions(-) diff --git a/content/admin/data-residency/network-details-for-ghecom.md b/content/admin/data-residency/network-details-for-ghecom.md index 450544a310..d1ca9fcd64 100644 --- a/content/admin/data-residency/network-details-for-ghecom.md +++ b/content/admin/data-residency/network-details-for-ghecom.md @@ -12,14 +12,18 @@ redirect_from: To access your enterprise on {% data variables.enterprise.data_residency_site %}, client systems must: -* Trust the following SSH key fingerprints -* Have access to the following hostnames and IP addresses +* Trust {% data variables.product.github %}'s SSH key fingerprints +* Have access to {% data variables.product.github %}'s hostnames and IP addresses ## {% data variables.product.github %}'s SSH key fingerprints -* `SHA256:PYES2CtancLX+w0+VvwWRQclfulUkqj6hpZmcKFAO3w` (RSA) -* `SHA256:TKoEXigNsj5b6XaSOSf20L0y3cuNx41WWM+l4AAK9k4` (ECDSA) -* `SHA256:LqPvjvQugr3MmzVYw9M3gT7won8/lUPZCSvmNydl7vU` (Ed25519) +To find these details, use the `/meta` API endpoint for your instance. For example, using the {% data variables.product.prodname_cli %}: + +```shell +gh api /meta --hostname octocorp.ghe.com +``` + +For more information, see [AUTOTITLE](/rest/meta/meta). ## {% data variables.product.github %}'s hostnames @@ -36,8 +40,6 @@ To access your enterprise on {% data variables.enterprise.data_residency_site %} ### The EU -These are {% data variables.product.company_short %}'s IP address ranges for enterprises hosted in the EU. - | Ranges for egress traffic | Ranges for ingress traffic | |--------------------------|---------------------------| | 108.143.221.96/28 | 108.143.197.176/28 | @@ -49,8 +51,6 @@ These are {% data variables.product.company_short %}'s IP address ranges for ent ### Australia -These are {% data variables.product.company_short %}'s IP address ranges for enterprises hosted in Australia. - | Ranges for egress traffic | Ranges for ingress traffic | |--------------------------|---------------------------| | 20.5.34.240/28 | 4.237.73.192/28 | @@ -59,14 +59,20 @@ These are {% data variables.product.company_short %}'s IP address ranges for ent ### US -These are {% data variables.product.company_short %}'s IP address ranges for enterprises hosted in the US. - | Ranges for egress traffic | Ranges for ingress traffic | |--------------------------|---------------------------| | 20.221.76.128/28 | 74.249.180.192/28 | | 135.233.115.208/28 | 48.214.149.96/28 | | 20.118.27.192/28 | 172.202.123.176/28 | +### Japan + +| Ranges for egress traffic | Ranges for ingress traffic | +|--------------------------|-----------------------------| +| 74.226.88.192/28 | 74.226.88.240/28 | +| 40.81.180.112/28 | 40.81.176.224/28 | +| 4.190.169.192/28 | 4.190.169.240/28 | + ## Supported regions for Azure private networking If you use Azure private networking for {% data variables.product.company_short %}-hosted runners, the supported Azure regions on {% data variables.enterprise.data_residency_site %} differ from those on {% data variables.product.prodname_dotcom_the_website %}. @@ -95,6 +101,14 @@ If you use Azure private networking for {% data variables.product.company_short | arm64 | `centralus`, `eastus2`, `westus3` | | GPU | `centralus`, `eastus2`, `westus3` | +### Supported regions in Japan + +| Runner type | Supported regions | +| ----------- | ----------------- | +| x64 | `japaneast`, `japanwest` | +| arm64 | `japaneast`, `japanwest` | +| GPU | `japaneast` | + ### IP ranges for Azure private networking #### EU @@ -113,17 +127,30 @@ EU region: * 20.240.220.192/28 * 20.240.211.208/28 -#### Austrailia +#### Australia Actions IPs: * 4.147.140.77 * 20.53.114.78 -Austraila region: +Australia region: * 4.237.73.192/28 * 20.5.226.112/28 * 20.248.163.176/28 +#### Japan + +Actions IPs: + +* 20.63.233.164 +* 172.192.153.164 + +Japan region: + +74.226.88.241 +40.81.176.225 +4.190.169.240 + #### Required for all regions * `Storage` service tag @@ -160,35 +187,3 @@ Austraila region: ## IP ranges for {% data variables.product.prodname_importer_proper_name %} If you're running a migration to your enterprise with {% data variables.product.prodname_importer_proper_name %}, you may need to add certain ranges to an IP allow list. See [AUTOTITLE](/migrations/using-github-enterprise-importer/migrating-between-github-products/managing-access-for-a-migration-between-github-products#configuring-ip-allow-lists-for-migrations). - -### Required in the EU - -* 4.231.155.80/29 -* 4.225.9.96/29 -* 51.12.152.184/29 -* 20.199.6.80/29 -* 51.12.144.32/29 -* 20.199.1.232/29 -* 51.12.152.240/29 -* 20.19.101.136/29 -* 74.241.131.48/28 -* 51.12.252.16/28 -* 20.240.211.176/28 -* 108.143.221.96/28 -* 20.61.46.32/28 -* 20.224.62.160/28 - -### Required in Australia - -* 20.213.241.72/29 -* 20.11.90.48/29 -* 20.5.34.240/28 -* 20.5.146.128/28 -* 68.218.155.16/28 - -### Required in the US - -* 130.213.245.128/28 -* 20.171.204.144/28 -* 20.171.204.176/28 -* 4.150.167.192/28 diff --git a/content/authentication/keeping-your-account-and-data-secure/about-githubs-ip-addresses.md b/content/authentication/keeping-your-account-and-data-secure/about-githubs-ip-addresses.md index 6fd5a45b29..1056a991ee 100644 --- a/content/authentication/keeping-your-account-and-data-secure/about-githubs-ip-addresses.md +++ b/content/authentication/keeping-your-account-and-data-secure/about-githubs-ip-addresses.md @@ -19,13 +19,7 @@ topics: shortTitle: GitHub's IP addresses --- -You can retrieve a list of the IP addresses for {% data variables.product.prodname_dotcom_the_website %} from the [meta](https://api.github.com/meta) API endpoint. For more information, see [AUTOTITLE](/rest/meta). - -{% ifversion ghec %} - -If you access {% data variables.product.github %} on a subdomain of {% data variables.enterprise.data_residency_site %}, the meta endpoint does not return IP ranges for your subdomain. See [AUTOTITLE](/admin/data-residency/network-details-for-ghecom#githubs-ip-addresses). - -{% endif %} +You can retrieve a list of the IP addresses for your {% data variables.product.github %} environment from the [meta](https://api.github.com/meta) API endpoint. For more information, see [AUTOTITLE](/rest/meta). > [!NOTE] > The list of {% data variables.product.prodname_dotcom %} IP addresses returned by the Meta API is not intended to be an exhaustive list. For example, IP addresses for some {% data variables.product.prodname_dotcom %} services might not be listed, such as LFS or {% data variables.product.prodname_registry %}. diff --git a/content/migrations/using-github-enterprise-importer/migrating-between-github-products/managing-access-for-a-migration-between-github-products.md b/content/migrations/using-github-enterprise-importer/migrating-between-github-products/managing-access-for-a-migration-between-github-products.md index 3669df26d5..f0004c4d09 100644 --- a/content/migrations/using-github-enterprise-importer/migrating-between-github-products/managing-access-for-a-migration-between-github-products.md +++ b/content/migrations/using-github-enterprise-importer/migrating-between-github-products/managing-access-for-a-migration-between-github-products.md @@ -142,7 +142,9 @@ If the source of your migration is {% data variables.product.prodname_ghe_server ### IP ranges for {% data variables.enterprise.data_residency_site %} -{% data reusables.enterprise-migration-tool.ip-ranges-ghecom %} +You can get an up-to-date list of IP ranges used by {% data variables.product.prodname_importer_proper_name %} at any time with the "Get {% data variables.product.github %} meta information" endpoint of the REST API. + +The `github_enterprise_importer` key in the response contains a list of IP ranges used for migrations. In addition, if you are migrating from {% data variables.product.prodname_ghe_server %} and using a blob storage account with firewall rules: diff --git a/data/reusables/data-residency/when-you-adopt-data-residency.md b/data/reusables/data-residency/when-you-adopt-data-residency.md index d2301cbc0b..3f34c59e57 100644 --- a/data/reusables/data-residency/when-you-adopt-data-residency.md +++ b/data/reusables/data-residency/when-you-adopt-data-residency.md @@ -7,5 +7,6 @@ The available regions are: * EU * Australia * US +* Japan In the future, {% data variables.product.github %} plans to offer {% data variables.enterprise.data_residency_short %} in more regions.