Summary of Change

To enhance the stability of our network infrastructure, Alibaba Cloud plans to upgrade the relevant network egress (NAT). After the upgrade, the egress IP addresses used by the Alibaba Cloud DNS Secondary DNS service (Public Authoritative Resolution) and the Alibaba Cloud PrivateZone Secondary DNS service (Private/Internal Resolution) to reach your Primary DNS will change. Details are as follows:

1. Background

The Secondary DNS service of Alibaba Cloud DNS needs to actively connect to your Primary DNS (Primary/Master) to synchronize resolution data via zone transfer (AXFR/IXFR). After this network egress upgrade, the egress IP addresses from which we initiate synchronization requests will change.

2. Scope of Impact

This change only affects users who meet both of the following conditions:

You are currently using the Alibaba Cloud DNS Secondary DNS (Public) or PrivateZone Secondary DNS (Private) feature; and

On your self-managed / third-party Primary DNS, you have configured an ACL allowlist / firewall rule that restricts access based on Alibaba Cloud's Secondary DNS egress IPs.

If you have not restricted access by source IP, this change does not affect you and no action is required.

3. Details of Egress IP Change

Egress IP changes for the Secondary DNS of both Public Authoritative Resolution and Private Internal Resolution:

Old IP ranges:

47.101.108.0/24, 47.92.22.0/24, 47.96.60.0/24

New IP ranges:

47.101.108.0/24, 47.92.22.0/24, 47.96.60.0/24, 8.128.0.0/16, 8.132.0.0/16, 8.134.0.0/16, 8.137.0.0/16, 8.139.0.0/16, 8.146.0.0/16, 8.147.0.0/16, 39.97.0.0/16, 39.98.0.0/16, 39.99.0.0/16, 39.101.0.0/16, 39.104.0.0/16, 39.107.0.0/16, 47.92.0.0/16, 47.101.0.0/16, 47.102.0.0/16, 47.103.0.0/16, 47.106.0.0/16, 47.108.0.0/16, 47.109.0.0/16, 47.111.0.0/16, 47.112.0.0/16, 47.113.0.0/16, 47.120.0.0/16, 47.121.0.0/16, 47.123.0.0/16, 101.133.0.0/16, 101.200.0.0/16, 110.75.0.0/16, 115.28.0.0/16, 119.23.0.0/16, 120.24.0.0/16, 120.27.0.0/16, 182.92.0.0/16, 223.4.0.0/16, 223.5.0.0/16

4. Action Required

Before the [effective date: August 20, 2026], please add and allow the new egress IP ranges above in your Primary DNS ACL allowlist / firewall rules.

5. Impact If Not Handled in Time

If the new egress IP ranges are not added to your allowlist before the effective date, Alibaba Cloud Secondary DNS will be unable to synchronize resolution data from your Primary DNS normally, which may cause resolution records to fail to update, resolution anomalies, and consequently business disruption.

6. Special Notice

The network egress IPs may be subject to further adjustment in the future. We strongly recommend that you follow official announcements and maintain your allowlist according to the principle of least privilege, in order to minimize the risk of disruption caused by IP changes.

7. Support

If you have any questions, please submit a ticket or contact your account manager, and we will be glad to assist.

Thank you for choosing Alibaba Cloud DNS.