Authorise Access to Cloud Data Published to Tableau Cloud
The information in this topic applies to you if you publish workbooks or data sources to Tableau Cloud that contain live connections to cloud data – for example, Amazon, Google, Salesforce.com.
As a security measure, cloud data providers might require you to supply authorised IP addresses from which external applications request access to your data. A request from an IP address that is not explicitly approved could be rejected. To make sure live connections you publish to Tableau Cloud remain uninterrupted, add Tableau Cloud to your data provider’s allowlist.
The table lists IP address ranges that Tableau Cloud uses, depending on your site location. You can see its location in the URL that appears after you sign in to Tableau Cloud.
IP addresses are dedicated to and controlled by Salesforce.
Note: In addition to enabling communication over the Tableau Cloud IP range, you might need to enable access over the appropriate database port (for example, 80 or 443) depending on the communication type (HTTP or HTTPS).
Important: From August to December 2024, Tableau Cloud sites will be migrating to Salesforce's Hyperforce(Link opens in a new window), one pod at a time. Because Hyperforce uses different IP addresses, the migration to Hyperforce will require you to update your data provider’s allowlist. Going forward, IP addresses will need to be updated periodically. For more information, see the New IP addresses (after Hyperforce migration) section below.
For more information about Tableau Cloud's migration to Hyperforce, including when your pod will be moving, see the Tableau Cloud Migration to Hyperforce(Link opens in a new window) knowledge article.
New IP addresses (after Hyperforce migration)
From August to December 2024, Tableau Cloud sites will be migrating to Salesforce's Hyperforce(Link opens in a new window) by pod. After your pod’s migration to Hyperforce, your data provider’s allowlist will need to be updated to use Hyperforce IP addresses.
IP address process change
Hyperforce IP addresses are updated periodically and will require your data provider's allowlist to be updated. To stay informed about new IP addresses, you have one or both options:
Periodically review the IP address tables below: At least 30 days before the IP addresses are enabled, the IP address tables below are updated. Site admins will also receive an email notification alerting them of the new IP addresses.
Automate IP address updates using the JSON text file: Salesforce recommends that your data provider’s allowlist mirror the https://ip-ranges.salesforce.com/ip-ranges.json(Link opens in a new window) text file at all times by automating the IP address updates. New IP addresses are posted to the text file at least 30 days before they’re enabled and are denoted by the “Created Date” (in UTC).
In the text file, the IP address and range for your pod are listed by the Hyperforce region that your pod resides in. To determine the Hyperforce region that your pod resides in, refer to the "Pod Name" and the associated "Hyperforce Region Name" in the tables below. For example, if your pod name is "prod-ca-a", your Hyperforce region name is "ca-central-1". In https://ip-ranges.salesforce.com/ip-ranges.json(Link opens in a new window) text file, search for "ca-central-1" for the appropriate IP addresses to include in your data provider's allowlist.
Pods migrated to Hyperforce
| Pod Name (Host Name) | Location | Hyperforce Region Name | Initial IP Address and Range after Hyperforce Migration |
| prod-ca-a (prod-ca-a.online.tableau.com) | Canada - Quebec | ca-central-1 | 155.226.152.0/23 (Alternatively, search for "ca-central-1" region in https://ip-ranges.salesforce.com/ip-ranges.json(Link opens in a new window)) |
| prod-uk-a (prod-uk-a.online.tableau.com) | Europe - UK | eu-west-2 | 145.224.200.0/23 (Alternatively, search for "eu-west-2" region in https://ip-ranges.salesforce.com/ip-ranges.json(Link opens in a new window)) |
| useast-1 (us-east-1.online.tableau.com) | US East - Virginia | us-east-1 | 155.226.144.0/22 (Alternatively, search for "us-east-1" region in https://ip-ranges.salesforce.com/ip-ranges.json(Link opens in a new window)) |
| 10AY (10ay.online.tableau.com) | US West - Oregon | us-west-2 | 155.226.128.0/21 (Alternatively, search for "us-west-2" region inhttps://ip-ranges.salesforce.com/ip-ranges.json(Link opens in a new window)) |
| DUB01 (dub01.online.tableau.com) | Europe – Germany (formerly Europe – Ireland) | eu-central-1 | 145.224.208.0/23 (Alternatively, search for "eu-central-1" region in https://ip-ranges.salesforce.com/ip-ranges.json(Link opens in a new window)) |
Pods not migrated to Hyperforce
| Location | Pod Name (Host Name) | Hyperforce Region Name | Initial IP Address and Range after Hyperforce Migration |
| US East - Virginia | prod-useast-b | us-east-1 | 155.226.144.0/22 (Alternatively, search for "us-east-1" region in https://ip-ranges.salesforce.com/ip-ranges.json(Link opens in a new window)) |
| US West - Oregon | UW2B | us-west-2 | 155.226.128.0/21 (Alternatively, search for "us-west-2" region in https://ip-ranges.salesforce.com/ip-ranges.json(Link opens in a new window)) |
| Asia Pacific – Australia | prod-apsoutheast-a | ap-southeast-2 | 141.163.192.0/23 (Alternatively, search for "ap-southeast-2" region in https://ip-ranges.salesforce.com/ip-ranges.json(Link opens in a new window)) |
| US East - Virginia | prod-useast-a | us-east-1 | 155.226.144.0/22 (Alternatively, search for "us-east-1" region inhttps://ip-ranges.salesforce.com/ip-ranges.json(Link opens in a new window)) |
| Europe - Ireland | EW1A | eu-central-1 | 145.224.208.0/23 (Alternatively, search for "eu-central-1" region inhttps://ip-ranges.salesforce.com/ip-ranges.json(Link opens in a new window)) |
| Asia Pacific - Japan | prod-apnortheast-a | ap-northeast-1 | 141.163.208.0/23 (Alternatively, search for "ap-northeast-1" region in https://ip-ranges.salesforce.com/ip-ranges.json(Link opens in a new window)) |
| US West - Oregon | 10AZ | us-west-2 | 155.226.128.0/21 (Alternatively, search for "us-west-2" region in https://ip-ranges.salesforce.com/ip-ranges.json(Link opens in a new window)) |
For more information, see one of the following:
About the Hyperforce migration, see the Tableau Cloud Migration to Hyperforce(Link opens in a new window) knowledge article
About the Hyperforce migration schedule, see the Schedule for Tableau Cloud Migration to Hyperforce(Link opens in a new window) knowledge article
Old IP addresses (before Hyperforce migration)
The IP addresses in the table below only apply if the pod where your Tableau Cloud site resides has not migrated to Hyperforce yet.
For more information, see one of the following:
About the Hyperforce migration, see the Tableau Cloud Migration to Hyperforce(Link opens in a new window) knowledge article
About the Hyperforce migration schedule, see the Schedule for Tableau Cloud Migration to Hyperforce(Link opens in a new window) knowledge article
| Host Name (Pod) | Location | Hyperforce Region Name | IP Addresses or Range |
|---|---|---|---|
10ax.online.tableau.com (10AX) | US West - Oregon | us-west-2 | 34.208.207.197 52.39.159.250 |
10ay.online.tableau.com (10AY) | US West - Oregon | us-west-2 |
|
10az.online.tableau.com (10AZ) | US West - Oregon | us-west-2 | 34.218.83.207 52.37.252.60 |
us-west-2b.online.tableau.com (UW2B) | US West - Oregon | us-west-2 | 34.214.85.34 34.214.85.244 |
us-east-1.online.tableau.com (useast-1) | US East - Virginia | us-east-1 |
|
| prod-useast-a.online.tableau.com (prod-useast-a) | US East - Virginia | us-east-1 | 3.219.176.16/28 |
prod-useast-b.online.tableau.com (prod-useast-b) | US East - Virginia | us-east-1 | 3.219.176.16/28 |
dub01.online.tableau.com (DUB01) | EU West - Ireland Note: After the move to Hyperforce, region will move to Germany. For more information, see Tableau Cloud Migration to Hyperforce(Link opens in a new window) knowledge article. | eu-central-1 |
|
eu-west-1a.online.tableau.com (EWA1) | EU West - Ireland Note: After the move to Hyperforce, region will move to Germany. For more information, see Tableau Cloud Migration to Hyperforce(Link opens in a new window) knowledge article. | eu-central-1 | 34.246.62.141 34.246.62.203 |
prod-apnortheast-a.online.tableau.com (prod-apnortheast-a) | Asia Pacific - Japan | ap-southeast-1 | 18.176.203.96/28 |
prod-apsoutheast-a.online.tableau.com (prod-apsoutheast-b) | Asia Pacific – Australia | ap-southeast-2 | 3.25.37.32/28 |
prod-uk-a.online.tableau.com (prod-uk-a) | EU West - UK | eu-west-2 |
|
prod-ca-a.online.tableau.com (prod-ca-a) | Canada - Quebec | ca-central-1 |
|
Find authorisation steps for your data provider
The following links take you to the steps on common data providers’ websites for authorising external applications on their platforms.
Amazon:
Microsoft Azure(Link opens in a new window)
Google Cloud Platform(Link opens in a new window)
Disclaimer: The links in the list above take you outside of Tableau.com. Although we make every effort to ensure links to external websites are accurate, up to date and relevant, Tableau cannot take responsibility for the accuracy or freshness of pages maintained by external providers. Contact the external site for answers to questions regarding its content.
Tableau Bridge connections to Tableau Cloud
To facilitate connections between on-premises data and Tableau Cloud, Tableau Bridge uses common port 443 to make outbound requests to Tableau Cloud. For more information, see Network access section in the Install Tableau Bridge topic.
See also
Keep Data Fresh(Link opens in a new window) (Tableau Cloud Help)