Skip to main content
All CollectionsConnecting your platformsShopping Platforms
How to Configure Your Self-Hosted Store to Allowlist API Calls from Wayflyer
How to Configure Your Self-Hosted Store to Allowlist API Calls from Wayflyer
Updated over 2 weeks ago

If you are hosting your own store and have implemented security measures such as a CDN, firewall, or other server-side protections, these settings may block API calls from Wayflyer. To ensure smooth communication between Wayflyer and your store, you can configure your setup to allow API requests from Wayflyer by adding our User-Agent and specific IP addresses to the allowlist.

Step-by-Step Guide to Allowlisting Wayflyer API Calls

  1. Understand the Wayflyer User-Agent

    Wayflyer uses the following User-Agent for its API calls:

    Wayflyer/1.0

    This unique identifier can be used to recognise and allow Wayflyer’s requests in your security configuration.

  2. Allowlisting Wayflyer IP Addresses

    In addition to allowing the User-Agent, you should also allowlist the specific IP addresses used by Wayflyer to ensure uninterrupted API communication. The IP addresses to allowlist are:

    54.217.84.251
    34.252.31.97

    Adding these IPs to your allowlist will ensure that requests from Wayflyer’s servers are not blocked.

  3. Check Your Security System

    Determine which security system might be blocking the requests:

    • Firewall: If you have a firewall configured, it might block specific requests, including those from Wayflyer.

    • CDN (e.g., Cloudflare, AWS CloudFront): CDNs often have security rules that can block incoming API requests.

    • Server Settings: Some hosting providers have built-in protection tools that could also block requests.

    Review your server logs or security tool logs to confirm that Wayflyer’s API calls are being blocked.

  4. Update Your CDN or Firewall Rules

    Follow the steps below to allow API calls from Wayflyer:

    For CDN (e.g., Cloudflare):

    • Log in to your CDN account.

    • Navigate to the Security or Firewall section.

    • Look for options to create a custom rule or adjust the allowlist.

    • Add a rule to allow requests with the User-Agent:

      Wayflyer/1.0
    • Add rules to allow the specific IP addresses:

      54.217.84.251
      34.252.31.97
    • Save your changes and test by retrying the connection.


    For Firewalls

    • Access your firewall management interface (e.g., via your hosting control panel or standalone firewall tool).

    • Locate the section for managing allowlists or custom rules.

    • Create a rule to allow requests with the User-Agent

      Wayflyer/1.0.
    • Create additional rules to allowlist the IPs:

      54.217.84.251
      34.252.31.97
    • Apply the changes and verify functionality.


    For Server-Side Settings:

    • If you have server-side tools like ModSecurity or custom .htaccess rules:

      • Locate the configuration file for your security tool.

      • Add an exception for the User-Agent Wayflyer/1.0. For example, in ModSecurity, you might add:

        SecRule REQUEST_HEADERS:User-Agent "Wayflyer/1.0" "id:1234,phase:1,allow"
      • Add rules to allow requests from the specific IPs:

        SecRule REMOTE_ADDR "@ipMatch 54.217.84.251" "id:1235,phase:1,allow"
        SecRule REMOTE_ADDR "@ipMatch 34.252.31.97" "id:1236,phase:1,allow"
      • Restart your server if necessary to apply changes.

  5. Verify the Configuration
    Once you’ve updated your settings, test the connection by having Wayflyer attempt to make API calls to your store. If the calls are successful, your configuration is complete.

  6. Contact Your Hosting Provider if Needed
    If you’re unsure how to adjust your settings or the issue persists, contact your hosting provider or system administrator for assistance. Provide them with the following details:

    • The API endpoint being called by Wayflyer.

    • The User-Agent header:

      Wayflyer/1.0.
    • The IP addresses to allowlist:

      54.217.84.251
      34.252.31.97
    • Logs or errors indicating the blocked requests.

💡 Additional Tips

Keep Security Measures Enabled: Ensure that only Wayflyer’s requests are allowed while maintaining your overall security configuration.

By following these steps, you can enable seamless API communication between your store and Wayflyer, ensuring uninterrupted service and accurate data exchange.

Your data is secured in encrypted databases. View our privacy notice to learn more.

Did this answer your question?