The new Stable Egress Controller makes tuist.dev outbound traffic resilient to node failures. It runs as a leader-elected controller and automatically fails over the Hetzner Floating IP and the active gateway label to a healthy candidate node when the current gateway is lost. This eliminates the manual label and IP migration that caused the 2026-06-14 outage, so server egress no longer black-holes and customers no longer see 503s from a missing gateway.
For teams that allowlist Tuist egress IPs, the reserved set of stable outbound addresses is now documented as fixed /32s: 116.202.0.10 and 116.202.4.195. The controller only ever egresses from within that allowlist, and it fails closed if an active IP is outside the set, so you should add all listed addresses to your firewall or IP allow列表