Allowing IP addresses
If you are using the Full-SaaS version of the Data Productivity Cloud, you may need to configure your source systems to accept requests from a set range of IP addresses. If the Hybrid-SaaS version means you have installed some hybrid agents in your cloud infrastructure and don't want to allow unrestricted outbound access, then you will need to allow access to a specified range of IP addresses.
Data Loader Batch
Allow the following addresses on secured data sources to allow inbound connections from Data Productivity Cloud services.
UK and EU region:
52.214.186.180
52.49.22.171
52.31.2.16
US region:
3.208.192.70
3.225.159.82
34.194.165.235
34.206.117.88
Data Loader CDC
Allow outbound communication on port 443 from the agent container to the Hub for initiating the websocket connection. The initial connection is from the agent out to the Hub—ongoing communication is then bidirectional, but there is no need to allow inbound traffic.
The specific endpoints that the agent must communicate with are:
ws-us.matillion-cdc-prod.matillion.com
ws-eu.matillion-cdc-prod.matillion.com
Agents and Git repositories
Full SaaS
If you're using a Full SaaS agent configuration, you may need to allow the following IP address ranges from which agents will call out to their source systems or to cloud data platforms. The IP addresses differ between EU and US regions.
UK and EU region:
3.253.125.96/28
3.145.243.112/28
US region:
44.213.193.16/28
13.39.113.112/28
Hybrid SaaS agents and Git repositories
If you're using a Hybrid SaaS deployment, note that it only necessitates outbound communication. For added security measures—along with ensuring access to any desired data sources for the Data Productivity Cloud—you need to allow the following IP address ranges to enable communication between the agent and the Data Productivity Cloud.
For users connecting to their own external repositories (such as "connect your own Git" on Github or Azure DevOps), these IPs will need to be allowed on the repository or organization being connected to.
Note that these IP addresses vary between the EU and US regions.
UK and EU region:
3.252.50.48/28
13.38.202.208/28
US region:
44.211.122.80/28
3.145.235.48/28
Hub
When configuring a connection from Matillion ETL to the Hub, allow list the following address: api.billing.matillion.com.
If you need to allow a static IP address, allow the following outbound addresses (on port 443) in your security group:
13.248.217.21
76.223.69.85
Full details on connecting Matillion ETL to the Hub are provided in Configuring a connection from Matillion ETL to the Hub.
Custom connectors and Flex Connectors
You may need to allow the following IP addresses before using custom connectors, Flex connectors or connecting to your own Git repository.
UK and EU region:
3.252.50.48/28
13.38.202.208/28
US region:
44.211.122.80/28
3.145.235.48/28