Outbound IP addresses
When Bloomreach connects to external systems—such as file storage, databases, SFTP servers, or webhook endpoints—those connections come from a fixed set of IP addresses registered exclusively to Bloomreach. You can use these IPs to restrict access to your systems so that only traffic from Bloomreach is accepted.
NoteOutbound IP addresses are the IPs Bloomreach uses when it connects to your systems. These are different from the IPs your systems use to connect to Bloomreach.
Where to find your outbound IPs
Your outbound IPs are available in:
-
Project settings > Security
-
Workspace settings > Security
From either screen you can view the full list of outbound IPs for your instance, copy individual IPs, or download the complete list.
ImportantOutbound IPs differ between instances and regions. Always use the IPs shown in your own settings screen—don't rely on IPs shared by other customers or listed in community resources.
Optional API monitoring
Your security team can optionally integrate with the Outbound IPs API and check the list regularly. This isn’t required for using outbound IP allowlisting.
Bloomreach aims to keep outbound IP changes infrequent. However, regularly checking the API can make any future additions or rotations easier to manage, helping your team keep firewall rules up to date without manual checks. The API response includes a freshness timestamp so automated systems can detect if and when the list has changed.
Which integrations use outbound IPs
Bloomreach uses outbound IPs when connecting to external systems for imports and exports. Configure your firewall or access rules to allowlist these IPs for the following integrations:
| Integration | Imports | Exports | Notes |
|---|---|---|---|
| Amazon S3 | ✓ | ✓ | Required only if your S3 bucket policy restricts access by IP |
| Azure Storage (Blob / ADLS Gen 2) | ✓ | ✓ | Required only if your Azure storage account uses network rules |
| Databricks | ✓ | — | Required if your Databricks IP access list restricts by IP |
| Google BigQuery | — | — | Not supported. BQ uses GCP access controls. See BQ documentation for guidance. |
| Google Cloud Storage | — | — | Not supported. GCS uses GCP access controls. See GCS documentation for guidance. |
| MSSQL / Azure SQL | ✓ | — | Required if your database firewall restricts by IP |
| MySQL | ✓ | — | Required if your database firewall restricts by IP |
| PostgreSQL / Redshift | ✓ | — | Required if your database firewall restricts by IP |
| SFTP | ✓ | ✓ | Required if your SFTP server restricts access by IP |
| Snowflake | ✓ | — | Required if your Snowflake network policy restricts by IP |
| SSH tunnels | ✓ | — | Required if your SSH server restricts inbound connections by IP |
| URL | ✓ | — | Required if your URL endpoint restricts inbound traffic by IP. |
| Webhooks | — | ✓ | Required if your webhook endpoint restricts inbound traffic by IP. Enable Use static IPs on the webhook configuration screen. |
How to use your outbound IPs
-
Go to Project settings > Security or Workspace settings > Security.
-
Copy individual IPs or download the complete list.
-
Add the IPs to your system's allowlist, firewall rules, or network access controls.
For integration-specific guidance:
| Integration | How to allowlist |
|---|---|
| Amazon S3 | Add the IPs to your S3 bucket policy using the aws:SourceIp condition. |
| Azure Storage | Add the IPs to your storage account's network rules. |
| Databases (MySQL, PostgreSQL, Redshift, MSSQL, Azure SQL) | Open your database firewall to allow inbound connections on the database port from the Bloomreach IPs. |
| Databricks | Add the IPs to your Databricks IP access list. |
| Google Cloud Storage | IP-based allowlisting is not supported for GCS. Use GCP access controls. See GCS documentation for guidance. |
| SFTP | Open your SFTP server firewall to Bloomreach IPs on the port defined in your integration settings. |
| Snowflake | Add the IPs to your Snowflake network policy. |
| SSH tunnels | Open your SSH server firewall to allow inbound connections from Bloomreach IPs on port 22 (or your configured SSH port). |
| Webhooks | Configure your endpoint's firewall or reverse proxy to accept inbound requests from Bloomreach IPs. Enable Use static IPs on the webhook configuration screen. |
Related pages
Updated about 1 hour ago