Quick questions for xcode cloud build

We're investigating using xcode cloud to do our CI builds. We have our own on-prem self-managed GitLab behind a private firewall. Some questions on this:

  1. I see some IP's for Apple here: https://developer.apple.com/documentation/xcode/setting-up-your-project-to-use-xcode-cloud#Use-a-remote-source-control-repository

  2. Do these IP's ever change?

  3. Are there specific ports Apple uses? Would be nice to limit to only what's needed.

  4. Do we have to open in-bound access or can we instead have our builds reach out with an outbound only setup?

Do these IP's ever change?

Rarely, but it does happen. The list you see was recently updated, and these changes are announced through the Xcode Cloud Release Notes, so you can see when the recent update happened.

Are there specific ports Apple uses? Would be nice to limit to only what's needed.

None are documented, so you shouldn't make any assumptions about port selection.

Do we have to open in-bound access or can we instead have our builds reach out with an outbound only setup?

Xcode Cloud requires inbound access, that is noted in the document you linked to very briefly.

— Ed Ford,  DTS Engineer

Quick questions for xcode cloud build
 
 
Q