Authorise Access to Cloud Data Published to Tableau Cloud
The information in this topic applies to you if you publish workbooks or data sources to Tableau Cloud that contain live connections to cloud data – for example, Amazon, Google, Salesforce.com.
As a security measure, cloud data providers might require you to supply authorised IP addresses from which external applications request access to your data. A request from an IP address that is not explicitly approved could be rejected. To make sure live connections you publish to Tableau Cloud remain uninterrupted, add Tableau Cloud to your data provider’s allowlist.
The table lists IP address ranges that Tableau Cloud uses, depending on your site location. You can see its location in the URL that appears after you sign in to Tableau Cloud.
IP addresses are dedicated to and controlled by Salesforce.
Note: In addition to enabling communication over the Tableau Cloud IP range, you might need to enable access over the appropriate database port (for example, 80 or 443) depending on the communication type (HTTP or HTTPS).
Important: From August to December 2024, Tableau Cloud sites will be migrating to Salesforce's Hyperforce(Link opens in a new window), one pod at a time. Because Hyperforce uses different IP addresses, the migration to Hyperforce will require you to update your data provider’s allowlist. Going forward, IP addresses will need to be updated on a regular basis. For more information, see the New IP addresses (after Hyperforce migration) section below.
For more information about Tableau Cloud's migration to Hyperforce, including when your pod will be moving, see the Tableau Cloud Migration to Hyperforce(Link opens in a new window) knowledge article.
New IP addresses (after Hyperforce migration)
From August to December 2024, Tableau Cloud sites will be migrating to Salesforce's Hyperforce(Link opens in a new window) by pod. After your pod’s migration to Hyperforce, you can refer to the https://ip-ranges.salesforce.com/ip-ranges.json(Link opens in a new window) page regularly for the latest IP addresses to use.
Updated IP addresses are posted 30 days before they’re enabled.
Migrated pods
| Pod Name (Host Name) | Region | Hyperforce Region Name | Initial IP Address or Range after Hyperforce Migration |
prod-ca-a (prod-ca-a.online.tableau.com) | Canada - Quebec | ca-central-1 | 155.226.152.0/23 (Alternatively, search for "ca-central-1" region in https://ip-ranges.salesforce.com/ip-ranges.json)(Link opens in a new window) |
For more information, see one of the following:
About the Hyperforce migration, see the Tableau Cloud Migration to Hyperforce(Link opens in a new window) knowledge article
About the Hyperforce migration schedule, see the Schedule for Tableau Cloud Migration to Hyperforce(Link opens in a new window) knowledge article
About Salesforce IP addresses and alternative methods for maintaining hard-coded IP allowlists, see the Salesforce Core Services - IP Addresses and Domains to Allow(Link opens in a new window) knowledge article
Old IP addresses (before Hyperforce migration)
The IP addresses in the table below only apply if the pod where your Tableau Cloud site resides has not migrated to Hyperforce yet.
For more information, see one of the following:
About the Hyperforce migration, see the Tableau Cloud Migration to Hyperforce(Link opens in a new window) knowledge article
About the Hyperforce migration schedule, see the Schedule for Tableau Cloud Migration to Hyperforce(Link opens in a new window) knowledge article
| Host Name (Pod) | Site Location | IP Address or Range |
|---|---|---|
10ax.online.tableau.com (10AX) | US West - Oregon | 34.208.207.197 52.39.159.250 |
10ay.online.tableau.com (10AY) | US West - Oregon | 34.218.129.202 52.40.235.24 |
10az.online.tableau.com (10AZ) | US West - Oregon | 34.218.83.207 52.37.252.60 |
us-west-2b.online.tableau.com (UW2B) | US West - Oregon | 34.214.85.34 34.214.85.244 |
us-east-1.online.tableau.com (useeast-1) | US East - Virginia | 50.17.26.34 52.206.162.101 |
| prod-useast-a.online.tableau.com (prod-useast-a) | US East - Virginia | 3.219.176.16/28 |
prod-useast-b.online.tableau.com (prod-useast-b) | US East - Virginia | 3.219.176.16/28 |
dub01.online.tableau.com (DUB01) | EU West - Ireland | 34.246.74.86 52.215.158.213 |
eu-west-1a.online.tableau.com (EWA1) | EU West - Ireland | 34.246.62.141 34.246.62.203 |
prod-apnortheast-a.online.tableau.com (prod-apnortheast-a) | Asia Pacific - Japan | 18.176.203.96/28 |
prod-apsoutheast-a.online.tableau.com (prod-apsoutheast-b) | Asia Pacific – Australia | 3.25.37.32/28 |
prod-uk-a.online.tableau.com (prod-uk-a) | EU West - UK | 18.134.84.240/28 |
prod-ca-a.online.tableau.com (prod-ca-a) | Canada - Quebec |
|
Find authorisation steps for your data provider
The following links take you to the steps on common data providers’ websites for authorising external applications on their platforms.
Amazon:
Microsoft Azure(Link opens in a new window)
Google Cloud Platform(Link opens in a new window)
Disclaimer: The links in the list above take you outside of Tableau.com. Although we make every effort to ensure links to external websites are accurate, up to date and relevant, Tableau cannot take responsibility for the accuracy or freshness of pages maintained by external providers. Contact the external site for answers to questions regarding its content.
Tableau Bridge connections to Tableau Cloud
To facilitate connections between on-premises data and Tableau Cloud, Tableau Bridge uses common port 443 to make outbound requests to Tableau Cloud. For more information, see Network access section in the Install Tableau Bridge topic.
See also
Keep Data Fresh(Link opens in a new window) (Tableau Cloud Help)