If your self-managed instance is behind a firewall, it is possible to use CircleCI with a couple of caveats.
- You must add CircleCI’s "core IPs" to your firewall’s allowlist
- If using the Docker executor, you must either use the ip_ranges feature in the definition of each CI job OR use a self-hosted container runner. Note: ip_ranges incurs a charge of 450 credits/GB of network data transferred, monitor the costs with the Network tab & Plan Usage page.
- If you are using a macOS executor, add CircleCI’s macOS IP addresses to your firewall’s allowlist. There is no network transfer costs for macOS executor jobs.