You may need the IP addresses of ThousandEyes agents in order to construct firewall rules or similar filters. ThousandEyes does not publish a list of IP addresses, but customers can use the ThousandEyes application program interface (API) to obtain the IP addresses of both Cloud Agents assigned to your organization and Enterprise Agents assigned to your account group. You can query the API with a web browser, a custom script, or a RESTful API tool to obtain the latest list of IP addresses, or you can use our command-line tool: te-iplist.
Note that for Cloud Agents, the IP address assignment is relatively constant, but subject to change without notice. For more information, see Obtaining a List of ThousandEyes Agent IP Addresses.
te-iplist is a command-line interface (CLI) utility that queries the ThousandEyes API for the agents available for your account and outputs agents' IPs in different forms (IP list, subnet list, IP range list, IP block list) and formats (plain text, CSV, JSON, XML).
On Linux and macOS, ensure that the utility is executable before you use it:
chmod +x te-iplist
On macOS Catalina, disable the developer verification warning for this utility:
xattr -d com.apple.quarantine te-iplist
See the te-iplist documentation for all available parameters or issue the command with the
In the te-iplist commands illustrated in the sections below, the authentication fields need to be filled in this way:
<user> - the user's email address
<user-api-token> - the basic authentication token for the API
These values can be retrieved from the ThousandEyes application at Account Settings > Users and Roles > Profile tab.
Display a list of all Cloud and Enterprise Agent IP addresses (
$ ./te-iplist -u <user> -t <user-api-token> -o ip220.127.116.1118.104.22.16822.214.171.124126.96.36.199188.8.131.52...2400:8900::f03c:91ff:fec8:c7b22400:8900::f03c:91ff:fec8:c7d32400:8900::f03c:91ff:fedf:65c42403:7000:8000:400::202600:3c03::f03c:91ff:feae:cd41...
Display a minimal list of subnets (
-o subnet-loose) that cover Enterprise Agent IP addresses (
-e). The list should include agent names as comments (
$ ./te-iplist -u <user> -t <user-api-token> -o subnet-loose -e -n10.0.0.3 # kubernetes te-agent-pod10.0.1.0/26 # ip-10-0-1-48.localdomain; csc-internal; office-184.108.40.206 # kubernetes te-agent-pod; ip-10-0-1-48.localdomain; csc-internal; office-12
Display a list of IP blocks (
-o block-strict) of Cloud Agents' (
-c) IPv6 (
$ ./te-iplist -u <user> -t <user-api-token> -o block-strict -c -62400:8900::f03c:91ff:fec8:c7b22400:8900::f03c:91ff:fedf:65c42403:7000:8000:400::[18-20]...
Display a list of IP ranges (
-o range-strict) of Enterprise Agents' private (
-e-private) IPv4 (
$ ./te-iplist -u <user> -t <user-api-token> -o range-strict -e-private -4 -n10.10.10.202 - 10.10.10.203 # primoz-centos-te; centos6192.168.0.2 - 192.168.0.4 # thousandeyes-va-14244; thousandeyes-va-14403; thousandeyes-va66
Create a comma-separated values (CSV) file that includes all agents and all output formats:
$ ./te-iplist -u <user> -t <user-api-token> -o csv > all-agents.csv
You can open the CSV file as a spreadsheet in your favorite spreadsheet editor, such as LibreOffice Calc, Numbers, or Google Sheets. Unfortunately, Microsoft Excel does not support CSV files with newlines inside cells, and will not import the generated CSV.
IP subnets, IP ranges and IP blocks can be displayed in loose or strict notation. Strict notation covers only the IP addresses that are used by the agents. Loose notation covers all IP addresses that are used by the agents, but may also cover some of the addresses that are not used by the agents. Loose notation typically covers all the agent IP addresses with fewer entries. For example, IP addresses:
can be covered by multiple strict subnet notations:
or by a single loose subnet notation:
You should select the notation that is acceptable by your security standards.
Users assigned to multiple account groups can list the agents available in a specific account group with the
-a <accountGroupId> argument. You can list available account group IDs with the following:
te-iplist -u <user> -t <user-api-token> -account-groups
If you don't specify
-a, te-iplist uses the user's login account group. For users in multiple organizations, te-iplist assumes only one login account group; to specify multiple account groups, use the
-a argument to list them.