Security concern about Workbench's source IP addresses
|Knowledge Article Number||000214031|
|Description||I noticed that workbench.developerforce.com is using a non-Salesforce IP address. Why is this?|
|Resolution||workbench.developerforce.com is hosted on Heroku and thereby on AWS (Amazon Web Services), which uses the IP ranges documented at https://ip-ranges.amazonaws.com/ip-ranges.json, instead of the IP addresses used by Salesforce servers.
If this is a concern, you may consider configuring workbench within a firewall server in your company's network and use the source code and instructions found in this GitHub repository:
https://github.com/ryanbrainard/forceworkbench. Alternatively, if you are an existing Heroku customer, you may run this app on your own Heroku instance.
Please note that Workbench is NOT a supported product of or supported by Salesforce.