Clever Cloud

Details

Clever Cloud runs your app behind its load balancers on shared infrastructure, and its own documentation warns that outgoing IP ranges can change as it expands. A partner API that allowlists source IPs rejects your requests when that happens. Clever Cloud's native answer is a VPN add-on that provisions a fixed-IP outgoing node over IPSec or OpenVPN, where you maintain a CIDR list. It works, but it is a tunnel, and it only covers outbound.

QuotaGuard gives your app a fixed network identity from a single environment variable, and it covers inbound as well as outbound.

• One-Variable Setup: Set your QuotaGuard connection URL as an environment variable with clever env set, set HTTP_PROXY and HTTPS_PROXY to the same value, exclude internal hosts with NO_PROXY, then clever restart. No VPN tunnel, no custom image, no CIDR list.
• Two Static IPs, Not a Shifting Range: Instead of tracking Clever Cloud's published ranges and updating firewalls each time they grow, your app exits from two known addresses. Your partner locks their firewall to those two and keeps it closed.
• Inbound the VPN Add-On Does Not Cover: A bank, processor, or partner that sends you webhooks and requires a fixed destination IP gets one permanent address that forwards to your app, even as Clever Cloud rotates underneath. Clever Cloud's VPN add-on is outbound-only, which is the clearest reason to use a proxy instead.
• Production-Grade Reliability: A load-balanced pair of static IPs with automatic failover. Add both to any allowlist. Starter, Production, and Business share a static IP pair; Enterprise gives you dedicated IPs when you need guaranteed isolation.
• EU Data Residency: QuotaGuard runs EU regions in Frankfurt, Ireland, and London. An EU region keeps outbound traffic on an EU IP for most teams. Enterprise adds dedicated EU IPs, and the Data Residency add-on locks traffic, static IPs, and connection logs to the EU with no cross-border failover, from $899 per month.
• Shield for Regulated Data: For PCI-DSS, SOC 2, or HIPAA-bound apps, QuotaGuard Shield uses SSL passthrough so QuotaGuard never decrypts the data flowing between your app and the destination.

Add-on note: this targets Clever Cloud's shared, changing outbound IPs. Clever Cloud's own VPN add-on gives a fixed outbound IP inside its network; QuotaGuard is the simpler, inbound-capable, portable alternative.