Fivetran IP Addresses

We pull data from your sources and send it to your destination using a set of fixed IP addresses. To ensure that Fivetran can do this, you must safelist these IP addresses in your firewall. Use the following list to safelist all IPs listed for your selected cloud service provider and the region in which you'd like your Fivetran connections to run. Fivetran supports the following cloud service providers:

• Google Cloud Platform
• AWS
• Azure

To see your current data processing location (geography), cloud service provider, and region, go to the Connection Details section of the Destination page in your Fivetran dashboard:

Google Cloud Platform

If we are missing a region that you need, contact our support team.

AWS

If we are missing a region that you need, contact our support team.

Azure

If we are missing a region that you need, contact our support team.

Fivetran application IP addresses

Fivetran uses the following application IP addresses for requests that originate outside your data processing location. These IP addresses are the same across all data processing locations and are not part of your region's IP range.

In addition to your region's IP addresses, safelist these IP addresses if any of the following applies:

• You use IP-based authentication for webhooks. Fivetran validates the URL of your webhook-receiving endpoint and sends webhook events from these IP addresses.
• Your source or identity provider restricts OAuth requests by IP. Fivetran uses these IP addresses for OAuth flows.
• Your source restricts access by IP, and you set up or edit connections in the Fivetran dashboard. Some setup form fields, such as drop-down menus that retrieve values from your source, send requests from these IP addresses.

Fivetran Proxy users

Fivetran Proxy uses a wildcard domain to route traffic through our proxy servers. Your connection to Fivetran Proxy may communicate with any subdomain of the following wildcard domains. Each wildcard domain resolves to a set of IP addresses that may change over time.

The orchestrator.fivetran.com hostname is the Proxy Broker. The region-specific wildcard hostnames listed below are the Proxy Server hostnames for the corresponding cloud providers and regions.

Configure your firewall or traffic filtering device

If your firewall or traffic filtering device supports restricting traffic by domain or hostname, add the following domains to your safelist.

If your firewall or traffic filtering device does not support restricting traffic by domain or hostname, resolve the current IP addresses of the following domains and add them to your safelist. The IP addresses may change in the future without notice.

All providers and regions

For every provider and region, you must safelist the following domain:

Next, safelist the domains required for your cloud service provider:

Google Cloud Platform

AWS

Azure