Need Fabric IP Range for Whitelisting

[AbhijitBangal]

HI Community,

I want to access AWS redshift using Data pipeline Copy activity created in Fabric and for that I want Whitelist the IP address in AWS Redshift.

Fabric have Dynamic IP and is non Deterministic how can I get a Range of IP ,which I can whitelist in Redshift and access the database.

Thanks in Advance.

[FabianSchut · Accepted solution]

There is a list available with all possible IP's that Fabric uses: https://www.microsoft.com/en-us/download/details.aspx?id=56519. However, that is not a secure option, since every Fabric user would have access. Furthermore, the IP's can change over time, which could result in access loss. 

A secure option is to create a virtual machine, assign a static IP to that machine, and install the on-premises data gateway on that VM. You can then use that gateway to connect to databricks and you only need to add your private static IP-address in databricks.

[Anonymous]

Hi @AbhijitBangal,

Did the above suggestion helps? if that is the case, you can consider Kudo or Accept the helpful suggestions to help others who faced similar requirements.

Regards,

Xiaoxin Sheng

[Anonymous · Accepted solution]

Hi @AbhijitBangal,

I'd like to suggest you check at the following documents that mentions the allow list of fabric and power bi related services:

Add Fabric URLs to your allowlist - Microsoft Fabric | Microsoft Learn

Add Power BI URLs to allowlist - Microsoft Fabric | Microsoft Learn

Regards,

Xiaoxin Sheng

[FabianSchut · Accepted solution]

There is a list available with all possible IP's that Fabric uses: https://www.microsoft.com/en-us/download/details.aspx?id=56519. However, that is not a secure option, since every Fabric user would have access. Furthermore, the IP's can change over time, which could result in access loss. 

A secure option is to create a virtual machine, assign a static IP to that machine, and install the on-premises data gateway on that VM. You can then use that gateway to connect to databricks and you only need to add your private static IP-address in databricks.

[LineshGajeraq]

@FabianSchut 

I am trying to do the same thing. Customer requirement is to whitelist the IP Address for egress traffic to allow S3 bucket access where is Fabric has wide range of IP address. 

Does this VM needs to on On Prem or AWS? If On Prem VM can be used for  Fabric On Premise data gateway, then I can use this Data gateway not only for S3 bucket but also other on premise resource. 

Could you pleaes confirm if VM can be On premise or AWS?

[FabianSchut]

The VM could be anywhere, On Prem, AWS, Azure or any other location. As long as it has a Windows installed for the gateway server and one fixed IP with correct network settings, then it would be suited.

[AbhijitBangal]

I want to connect to AWS redshift and not databricks

[FabianSchut]

My bad, databricks is just a typo. You can have the same setup for AWS redshift.