Network changes on Cloud Terminal API endpoints in the EU

Adyen will introduce network changes in its EU endpoints used to receive incoming communication from customers to Adyen’s Cloud Terminal API service on October 11th, 2023.

 1) Will I be affected by this network change?

Likely this change does not affect your integration. Only customers that do (custom) IP allowlisting requests sent tos Adyen's endpoints may need to check if the full list of IP addresses used by Adyen is accepted by their firewalls.

 2) How can I verify if I am doing IP allowlisting?

IP allowlisting is done on the customer's side of the integration, outside of the Adyen platform. Therefore, customers' IP allowlisting strategies are not visible to Adyen. In case you are unsure, please check with your technical team, service administrator, or system integrator.

Customers who do not perform IP allowlisting, do not require to take action.

Requests and communications from customers' systems towards the Adyen platform should always use DNS to resolve the current list of IP addresses used by Adyen on a specific moment in time.

3) What is Adyen's recommendation on IP validation?

By default, Adyen does not recommend to perform IP allowlisting on Adyen's IP addresses since this may impact connectivity to Adyen's systems at the moment a new set of IP addresses is enabled or removed from the LIVE or TEST environment. In practice and for various reasons, Adyen may decide to make changes in the list of IP addresses being used at different moments in time (with or without prior communication).

In order to ensure the trustability of the domains used on Adyen's incoming and outgoing endpoints, Adyen provides on each domain a DNS certificate of authority authorisation (CAA). Upon establishing a connection to Adyen's domains and endpoints, merchants are required to authenticate the connection before any type of communication is exchanged between both parties.

 4) How can I check which domain(s) is/are relevant for my integration?

You can self-check the domain(s) that you use for API requests to Adyen. Usually, the domains can be found from your configuration. Your technical team or system integrator will be able to determine which endpoint(s) is/are being used in your integration.

For more information about Adyen's Cloud Terminal API domains and endpoints, please refer to this page: Terminal API

 5) I do IP allowlisting. How can I verify my connectivity the new set of IP addresses?

In case you perform IP allowlisting on the Adyen's API endpoints, you will need to get in touch with Adyen support via help.adyen.com/contact in order to get list of new IP addresses that will be used for our Cloud Terminal API service.

With this list you can then verify if the new list of IP addresses will be accepted by your endpoints.