Which IP addresses does Fabric use to access external servers to load data?

[amaaiia]

I'm trying to ingest data from several sources (SQL Servers, SAP, WebServers...) and admins of some of these sources are asking me which IP address do they have to whitelist in their firewall to allow inbound traffic from Fabric.

Is there any IP or IP range that Fabric uses for this purpose? I've seen in the documentation there are some endpoints, but not the IP adresses.

[Anonymous]

Here you find the IP Download Azure IP Ranges and Service Tags – Public Cloud from Official Microsoft Download Center.

It's to many IP and dynamic but the only way. May be there are solution with a DNS / domaine name, not sure outbound trafic from fabric have domain name.

[Henriccooo]

I have the same issue for Fabric North europe , I need to connect to America Blob storage , how does he white list me and which one should i use for in the json public service to be able to connect to blob storage 

[Anonymous]

Hi @amaaiia 
Thanks for using Fabric Community.

In Microsoft Fabric, you can use Azure service tags to enable connections to and from Microsoft Fabric. In Azure, a service tag is a defined group of IP addresses that you can configure to be automatically managed, as a group, to minimize the complexity of updates or changes to network security rules. You can use these service tags to define network access controls on network security groups, Azure Firewall, and user-defined routes.

For more information please refer to this document: 
Service tags - Microsoft Fabric | Microsoft Learn

Hope this helps. Please let me know if you have any further questions.

[amaaiia]

What if I need to read data from an external physical windows server (not in Azure), and the configuration of the firewall has to be done in the on-premise windows server? I guess Azure service tags are only usable for Azure services (i.e. Azure virtual machine), but how can configure an on-premise server firewall to allow inbound traffic from Fabric?

[Anonymous · Accepted solution]

Hi @amaaiia 
Fabric is a SaaS application- hence IP changes all the time. There is no deterministic IP address.
Appreciate if you could share the feedback on our feedback link , which would be open for the user community to upvote & comment on. This allows our product teams to effectively prioritize your request against our existing feature backlog and gives insight into the potential impact of implementing the suggested feature.
Feedback Link : Home (microsoft.com)

Hope this helps. Please let me know if you have any further questions.

[joncutting]

For Office365, Microsoft publishes the ranges used. This works tolerably well. Why is this approach not also adopted by the Fabric team?

[amaaiia]

Added an idea: https://ideas.fabric.microsoft.com/ideas/idea/?ideaid=8e8b07c1-960e-ef11-9899-6045bd7aa22e