Answer

Infrastructure Enhancement: PCN and Cloudflare Sureroute Access

Current Schedule

CAS (Test)

Production

Note: 

• There will be no changes to any other endpoints not listed in the above tables.
• There is no specific IP address for endpoints listed as N/A*. At any given moment, a request across the Cloudflare network may route through any one of their thousands of IP addresses. 

How to adopt the change

Merchants already using endpoints (listed in the table above) must do the following:
 

For Endpoints Migrating to PCN (see table above)

• Verify that all necessary SSL trust stores include three root-level SSL certificates.These root-level SSL certificates are provided by Entrust and can be found attached to this Knowledge Base article. Import them into your client app truststore. 
• Verify that your infrastructure/network/firewalls white-list their outbound traffic with the new IP addresses listed in the above table.

For Endpoints Migrating to Cloudflare (see table above)

If you access these specific endpoints via web browsers, no change is required. The CERT for CloudFlare is already present in all major browsers.

if you access these endpoints via server-to-server communication, you must import/install Cloudflare SSL certificates available as an attachment to article Secure Accetpance and FLEX SSL Certificates for Server-to-Server Connection in CloudFlare.

• Do not perform any 'outbound' IP-address whitelisting or blocking of any kind
• Use Domain Name System (DNS).

 
If your company uses third-party software that submits transactions to CyberSource, consult with your software provider to make all necessary changes.  

 

FAQs

Why is CyberSource introducing this change?

This technology enables seamless transaction routing between multiple data centers and helps safeguard against interruptions caused by issues beyond CyberSource's direct control, such as Internet congestion, fiber cable cuts, malicious Internet activity, etc.
 

Will there be any change to the Endpoint URL Domain Name?

No, all URLs domain names listed in the above table will remain the same.

Why are there two IP addresses for each endpoint migrating to PCN?

Each PCN endpoint has two IP addresses: each points to a different data center. These IPs are active/active. In the case of an issue connecting to one Data Center, traffic will be switched and routed to the other IP (data center). CyberSource recommends that you white-list both IP addresses.
 

Will there be any change to the other endpoint URLs?

No, only the URLs listed in the two above tables are included in this change.

Note: