Hey,
In our agent hosted on livekit inference platform, we have defined shutdown callback, in which we are sending a webhook back to the client application that have data like transcript, call duration etc. To avoid firewall, we have to whitelist IPs of livekit server. We initially tried by whitelisting these IPs -
- 143.223.88.0/21
- 161.115.160.0/19
- 153.57.128.0/18
But we are still seeing 403 (Forbidden error) in agent logs. Do we need to enable any other IP as well for this to work?
Those ranges only cover LiveKit’s own realtime/SIP/webhook traffic your shutdown callback egresses from the agent container instead, and LiveKit doesn’t publish IPs for that yet (What are the egress IPs for Agents Cloud compute containers?), so there’s nothing more you can whitelist.
Also, an IP block would give you a timeout, not a 403 that’s an L7 WAF or auth rejecting you. Easiest fix is to drop the IP rule on that path and authenticate the webhook with an HMAC or shared-secret header.