Forum Discussion

AbhijitBangal's avatar
AbhijitBangal
Regular Visitor
1 year ago
Solved

Need Fabric IP Range for Whitelisting

HI Community,

I want to access AWS redshift using Data pipeline Copy activity created in Fabric and for that I want Whitelist the IP address in AWS Redshift.

Fabric have Dynamic IP and is non Deterministic how can I get a Range of IP ,which I can whitelist in Redshift and access the database.

Thanks in Advance.

 

7 Replies

  • There is a list available with all possible IP's that Fabric uses: https://www.microsoft.com/en-us/download/details.aspx?id=56519. However, that is not a secure option, since every Fabric user would have access. Furthermore, the IP's can change over time, which could result in access loss. 

    A secure option is to create a virtual machine, assign a static IP to that machine, and install the on-premises data gateway on that VM. You can then use that gateway to connect to databricks and you only need to add your private static IP-address in databricks.

    • AbhijitBangal's avatar
      AbhijitBangal
      Regular Visitor

      I want to connect to AWS redshift and not databricks

       

      • FabianSchut's avatar
        FabianSchut
        Solution Sage

        My bad, databricks is just a typo. You can have the same setup for AWS redshift.

    • LineshGajeraq's avatar
      LineshGajeraq
      Microsoft Employee

      FabianSchut 

       

      I am trying to do the same thing. Customer requirement is to whitelist the IP Address for egress traffic to allow S3 bucket access where is Fabric has wide range of IP address. 

       

      Does this VM needs to on On Prem or AWS? If On Prem VM can be used for  Fabric On Premise data gateway, then I can use this Data gateway not only for S3 bucket but also other on premise resource. 

       

      Could you pleaes confirm if VM can be On premise or AWS?

      • FabianSchut's avatar
        FabianSchut
        Solution Sage

        The VM could be anywhere, On Prem, AWS, Azure or any other location. As long as it has a Windows installed for the gateway server and one fixed IP with correct network settings, then it would be suited.

  • Anonymous's avatar
    Anonymous
    Not applicable

    Hi AbhijitBangal,

    Did the above suggestion helps? if that is the case, you can consider Kudo or Accept the helpful suggestions to help others who faced similar requirements.

    Regards,

    Xiaoxin Sheng