Public IP addresses
Bunker runs two platforms. The main platform is spread across our four datacenters in western France (DC01 to DC04). DC05 runs on three Elastic Metal servers rented from Scaleway, in Paris.
This page lists all of their public addresses, as recorded on 29 October 2026. You need them to open a firewall or fill in an allowlist. If an address here differs from what DNS returns, DNS is the reference (see Check from your machine).
To find out which platform one of your services runs on, look up its name in DNS. The dig answer mentions zero-trust.france-nuage.fr for the main platform and zero-trust-dc05.france-nuage.fr for DC05.
dig +short <your-service-hostname>
Inbound addresses​
Your managed services answer on the following addresses, over IPv4 only. None of our inbound names publishes an AAAA (IPv6) record today.
| IPv4 address | Site | Inbound DNS name |
|---|---|---|
193.248.217.25 | DC01, Les Essarts-en-Bocage | zero-trust.france-nuage.fr |
82.127.227.21 | DC02, Rennes | zero-trust.france-nuage.fr |
109.222.174.13 | DC03, Nantes | zero-trust.france-nuage.fr |
62.210.92.190 | DC05, Paris (server c5-1) | zero-trust-dc05.france-nuage.fr |
62.210.95.109 | DC05, Paris (server c5-2) | zero-trust-dc05.france-nuage.fr |
51.159.97.83 | DC05, Paris (server c5-3) | zero-trust-dc05.france-nuage.fr |
DC04 receives no inbound traffic because it has no fixed IPv4 address.
For your own domain names, point a CNAME at the inbound name rather than an A record at an address. An automated check removes a site from DNS when it stops answering, and we also remove a site before maintenance. A hard-coded A record would keep sending your visitors to that site. The Custom domain tutorial walks through the setup.
Outbound addresses​
When one of our services connects to your systems (an n8n webhook, Metabase reaching your database, a call to your API), your firewall sees one of the addresses below. This traffic always leaves over IPv4, because the containers running our services have no IPv6 address.
| IPv4 address | Platform | Site | Address type |
|---|---|---|---|
193.248.217.25 | Main | DC01 | Fixed |
82.127.227.21 | Main | DC02 | Fixed |
109.222.174.13 | Main | DC03 | Fixed |
90.93.178.148 | Main | DC04 | Dynamic, tracked by dc04.france-nuage.fr |
62.210.92.190 | DC05 | Paris, c5-1 | Fixed |
62.210.95.109 | DC05 | Paris, c5-2 | Fixed |
51.159.97.83 | DC05 | Paris, c5-3 | Fixed |
Allow every address of your service's platform. A service on the main platform can run on any of the four sites and move to another one when it restarts. On DC05, a service leaves through the address of the server running it.
The DC04 address changes whenever its provider renews it. The name dc04.france-nuage.fr is updated every minute with the current address, and your firewall can refer to it if it accepts DNS names. The names dc01, dc02 and dc03.france-nuage.fr work the same way.
During a fibre outage, traffic from a site with a 4G/5G backup link leaves through an address that belongs to the mobile operator, is shared with other subscribers and changes over time. We cannot list it. Connections from that site to a firewall that filters by address then fail until the fibre comes back.
IPv6 addresses​
Our services do not use IPv6, inbound or outbound. The following addresses belong to the infrastructure and serve some of the encrypted tunnels between our datacenters, as well as the connections the servers open themselves.
The router of each main-platform site has a public IPv6 address, published under a dedicated DNS name.
| Site | Router IPv6 address | DNS name |
|---|---|---|
| DC01 | 2a01:cb05:8548:2c00:76fa:29ff:fe3c:e90a | dc01-v6.france-nuage.fr |
| DC02 | 2a01:cb08:82ab:d900:dab3:70ff:fe1b:9736 | dc02-v6.france-nuage.fr |
| DC03 | 2a01:cb05:911e:2800:5a1d:d8ff:fe75:a070 | dc03-v6.france-nuage.fr |
| DC04 | 2a01:cb05:810e:bb00:6e63:f8ff:fee6:bb35 | dc04-v6.france-nuage.fr |
The servers in DC01 and DC02 take their address from their site's IPv6 network, while those in DC03 and DC04 have none. Each DC05 server has its own address.
| Site | Server IPv6 network or address |
|---|---|
| DC01 | 2a01:cb05:8548:2cfc::/64 |
| DC02 | 2a01:cb08:82ab:d9cb::/64 |
| DC05, c5-1 | 2001:bc8:701:30:d6ae:52ff:fed1:3176 |
| DC05, c5-2 | 2001:bc8:701:402:8634:97ff:fe11:7c04 |
| DC05, c5-3 | 2001:bc8:1201:4:9eb6:54ff:febb:6158 |
The IPv6 prefixes of DC01 to DC04 are assigned by each site's provider and can change. The names dc01-v6 to dc04-v6.france-nuage.fr follow each router's current address.
Check from your machine​
The DNS names on this page are kept up to date automatically. During maintenance or an outage, zero-trust.france-nuage.fr may return only two of its three addresses. The following commands read back the addresses published in DNS:
# Inbound addresses, main platform then DC05
dig +short A zero-trust.france-nuage.fr
dig +short A zero-trust-dc05.france-nuage.fr
# Outbound IPv4 address of a main-platform site (dc01 to dc04)
dig +short A dc04.france-nuage.fr
# IPv6 address of a site's router (dc01-v6 to dc04-v6)
dig +short AAAA dc01-v6.france-nuage.fr