The API servers are used not only by customer-owned integrations, but by all Waitwhile websites and apps, both guest and staff-facing. It is therefore important to ensure successful connectivity to the API at all locations Waitwhile is to be used from.

As Waitwhile is always improving, any of the requirements below may change in the future. Breaking changes will be conveyed in advance. Keep up to date with communications from Waitwhile to ensure you don’t miss any important updates!

ℹ️

Other services

This page outlines the network and connectivity requirements needed to connect to our API servers. For information about our other services and websites, please see this help article.

Domains

The API servers are hosted at https://api.waitwhile.com. Whitelisting this domain is required for all Waitwhile apps and services.

IP Addresses

Connecting to Waitwhile

In addition to the domain name whitelisting, please ensure the following IP addresses are permitted through any firewalls or security policies:

IPv4

• 34.36.79.253
• 34.117.66.146

IPv6

• 2600:1901:0:954e:: (Please note that this is a prefix, and not a single address)

While changes to this list will be communicated in advance, it is important to ensure DNS queries are not cached for longer than their stated TTL. Which IP (out of those listed above) is used by the API server at any given time may change without prior notice.

Receiving connections from Waitwhile

Connections initiated by Waitwhile, such as webhooks, may originate from any Google Cloud IP address. For a full list, refer to https://support.google.com/a/answer/10026322?hl=en. Please note that Google may frequently change this list without prior notice.

Security

To ensure a high degree of security for both guests and staff, only secure connections are permitted access to the Waitwhile API.

HTTPS / TLS

This section outlines minimum requirements enforced when connecting to the API, but most users will find that keeping browsers or integrations’ libraries up to date is sufficient to not have to worry about the specific details; modern browsers and applications generally already fulfill these requirements without any additional action needed.

The API only permits secure connections made through HTTPS. In addition, the following capabilities are required:

• TLS 1.2 or later.
• One or more “modern” cryptographic ciphers, as defined by Google. For the current list, please see the feature table maintained by Google on this page. Please note that changes to this list by Google may not always be communicated by Waitwhile in advance.

IP Access Control

Waitwhile enables customers on some plans to further tighten their security by limiting which external IP addresses are permitted to access an account through the API. Please reach out to us to find out more!