Exchange FIX API Connectivity

Financial Information eXchange, or FIX, is a standard protocol which can be used to enter orders, submit cancel requests, and receive fills. FIX API users typically have existing software that runs FIX for order management.

The baseline specification for the Exchange FIX API is mixed:

• Order Entry: FIX 4.2 SP2
• Market Data: FIX 5.0 SP2

FIX5 Resets Saturdays at 1PM ET

FIX5 Order Entry and Market Data customers will be logged out every Saturday at 1PM ET (6PM UTC).

Changes are deployed every Monday and Thursday at or near 2PM EST (7PM UTC). At that time, a logout message is sent from the server to indicate the session is ending. We do not deploy on US federal holidays.

Supported Endpoints

Production
Order Entry (FIX42): VAR::FIX_URL_PROD_ORDER_ENTRY
Order Entry (FIX50): VAR::FIX_URL_PROD_ORDER_ENTRY_FIVE
Market Data (FIX50): VAR::FIX_URL_PROD_MARKET_DATA

Sandbox
Order Entry (FIX42): VAR::FIX_URL_SAND_ORDER_ENTRY_FOUR
Order Entry (FIX50): VAR::FIX_URL_SAND_ORDER_ENTRY_FIVE
Market Data (FIX50): VAR::FIX_URL_SAND_MARKET_DATA_FIVE

Resend Requests

Resend requests are not supported. Every connection establishes a new session and a new set of session sequence numbers.

FIX Gateway

Before logging onto a FIX session, clients must establish a secure connection to the FIX gateway. See the available endpoints above.

TCP SSL

If your FIX implementation does not support establishing a native TCP SSL connection, you must setup a local proxy such as stunnel to establish a secure connection to the FIX gateway.

Static IP

Coinbase Exchange does not support static IP addresses. If your firewall rules require a static IP address, you must create a TCP proxy server with a static IP address which is capable of resolving an IP address using DNS.

AWS IP

If connecting from servers outside of AWS which require firewall rules, use the AWS provided resources to determine how best to whitelist AWS IP ranges.

Changes are deployed every Monday and Thursday at or near 2PM EST (7PM UTC). At that time, a logout message is sent from the server to indicate the session is ending. We do not deploy on US federal holidays.

Ciphers

Coinbase Exchange supports TLSv1.2 with the following server ciphers:

Recommend	Length	Cipher Suite	Elliptic Curve
Preferred	128 bits	ECDHE-RSA-AES128-GCM-SHA256	Curve P-256 DHE 256
Accepted	128 bits	ECDHE-RSA-AES128-SHA256	Curve P-256 DHE 256
Accepted	256 bits	ECDHE-RSA-AES256-GCM-SHA384	Curve P-256 DHE 256
Accepted	256 bits	ECDHE-RSA-AES256-SHA384	Curve P-256 DHE 256

SSL Tunnels

Exchange FIX API endpoints only accept TCP connections secured by SSL. If your FIX client library cannot establish an SSL connection natively, you must run a local proxy that establishes a secure connection and allows unencrypted local connections.