Authorise Access to Cloud Data Published to Tableau Cloud
The information in this topic applies to you if you publish workbooks or data sources to Tableau Cloud that contain live connections to cloud data – for example, Amazon, Google, Salesforce.com.
As a security measure, cloud data providers might require you to supply authorised IP addresses from which external applications request access to your data. A request from an IP address that is not explicitly approved could be rejected. To make sure live connections you publish to Tableau Cloud remain uninterrupted, add Tableau Cloud to your data provider’s allowlist.
The table lists IP address ranges that Tableau Cloud uses, depending on your site location. You can see its location in the URL that appears after you sign in to Tableau Cloud.
IP addresses are dedicated to and controlled by Salesforce.
Note: In addition to enabling communication over the Tableau Cloud IP range, you might need to enable access over the appropriate database port (for example, 80 or 443) depending on the communication type (HTTP or HTTPS).
Important: From August to December 2024, Tableau Cloud sites will be migrating to Salesforce's Hyperforce(Link opens in a new window), one pod at a time. Because Hyperforce uses different IP addresses, the migration to Hyperforce will require you to update your data provider’s allowlist. Going forward, IP addresses will need to be updated periodically. For more information, see the New IP addresses (after Hyperforce migration) section below.
For more information about Tableau Cloud's migration to Hyperforce, including when your pod will be moving, see the Tableau Cloud Migration to Hyperforce(Link opens in a new window) knowledge article.
New IP addresses (after Hyperforce migration)
From August to December 2024, Tableau Cloud sites will be migrating to Salesforce's Hyperforce(Link opens in a new window) by pod. After your pod’s migration to Hyperforce, your data provider’s allowlist will need to be updated to use Hyperforce IP addresses.
IP address process change
Hyperforce IP addresses are updated periodically and will require you to regularly check this topic or monitor the https://ip-ranges.salesforce.com/ip-ranges.json(Link opens in a new window) text file directly for new IP addresses to be added to your allowlist. New IP addresses are posted to the text file 30-45 days before they’re enabled.
You can find the IP addresses for your pod by using the tables below. You can also find the IP addresses by searching the https://ip-ranges.salesforce.com/ip-ranges.json(Link opens in a new window) text file for the Hyperforce region that your pod resides in. To determine the Hyperforce region that your pod resides in, refer to the "Pod Name" and the associated "Hyperforce Region Name" in the tables below.
For example, if your pod name is "prod-ca-ca", your Hyperforce region name is "ca-central-1". In https://ip-ranges.salesforce.com/ip-ranges.json(Link opens in a new window) text file, search for "ca-central-1" for the appropriate IP addresses to include in your data provider's allowlist.
Pods migrated to Hyperforce
| Pod Name (Host Name) | Location | Hyperforce Region Name | Initial IP Address and Range after Hyperforce Migration |
prod-ca-a (prod-ca-a.online.tableau.com) | Canada - Quebec | ca-central-1 | 155.226.152.0/23 (Alternatively, search for "ca-central-1" region in https://ip-ranges.salesforce.com/ip-ranges.json(Link opens in a new window)) |
Pods not migrated to Hyperforce
| Location | Pod Name (Host Name) | Hyperforce Region Name | Initial IP Address and Range after Hyperforce Migration |
| Europe - UK | prod-uk-a | eu-west-2 | 145.224.200.0/23 (Alternatively, search for "eu-west-2" region in https://ip-ranges.salesforce.com/ip-ranges.json(Link opens in a new window)) |
| US East - Virginia | useast-1 | us-east-1 | 155.226.144.0/22 (Alternatively, search for "us-east-1" region in https://ip-ranges.salesforce.com/ip-ranges.json(Link opens in a new window)) |
| US West - Oregon | 10AY | us-west-2 | 155.226.128.0/21 (Alternatively, search for "us-west-2" region inhttps://ip-ranges.salesforce.com/ip-ranges.json(Link opens in a new window)) |
| Europe - Ireland (moving to Europe - Germany) | DUB01 | eu-central-1 | 145.224.208.0/23 (Alternatively, search for "eu-central-1" region in https://ip-ranges.salesforce.com/ip-ranges.json(Link opens in a new window)) |
| US East - Virginia | prod-useast-b | us-east-1 | 155.226.144.0/22 (Alternatively, search for "us-east-1" region inhttps://ip-ranges.salesforce.com/ip-ranges.json(Link opens in a new window)) |
| US West - Oregon | UW2B | us-west-2 | 155.226.128.0/21 (Alternatively, search for "us-west-2" region in https://ip-ranges.salesforce.com/ip-ranges.json(Link opens in a new window)) |
| Asia Pacific – Australia | prod-apsoutheast-a | ap-southeast-2 | 141.163.192.0/23 (Alternatively, search for "ap-southeast-2" region inhttps://ip-ranges.salesforce.com/ip-ranges.json(Link opens in a new window)) |
| US East - Virginia | prod-useast-a | us-east-1 | 155.226.144.0/22 (Alternatively, search for "us-east-1" region inhttps://ip-ranges.salesforce.com/ip-ranges.json(Link opens in a new window)) |
| Europe - Ireland | EW1A | eu-central-1 | 145.224.208.0/23 (Alternatively, search for "eu-central-1" region inhttps://ip-ranges.salesforce.com/ip-ranges.json(Link opens in a new window)) |
| Asia Pacific - Japan | prod-northeast-a | ap-northeast-1 | 141.163.208.0/23 (Alternatively, search for "ap-northeast-1" region in https://ip-ranges.salesforce.com/ip-ranges.json(Link opens in a new window)) |
| US West - Oregon | 10AZ | us-west-2 | 155.226.128.0/21 (Alternatively, search for "us-west-2" region in https://ip-ranges.salesforce.com/ip-ranges.json(Link opens in a new window)) |
For more information, see one of the following:
About the Hyperforce migration, see the Tableau Cloud Migration to Hyperforce(Link opens in a new window) knowledge article
About the Hyperforce migration schedule, see the Schedule for Tableau Cloud Migration to Hyperforce(Link opens in a new window) knowledge article
About alternative methods for maintaining hard-coded IP allowlists, see the Preferred Alternatives to IP Allowlisting on Hyperforce(Link opens in a new window) knowledge article
Old IP addresses (before Hyperforce migration)
The IP addresses in the table below only apply if the pod where your Tableau Cloud site resides has not migrated to Hyperforce yet.
For more information, see one of the following:
About the Hyperforce migration, see the Tableau Cloud Migration to Hyperforce(Link opens in a new window) knowledge article
About the Hyperforce migration schedule, see the Schedule for Tableau Cloud Migration to Hyperforce(Link opens in a new window) knowledge article
| Host Name (Pod) | Location | Hyperforce Region Name | IP Addresses or Range |
|---|---|---|---|
10ax.online.tableau.com (10AX) | US West - Oregon | us-west-2 | 34.208.207.197 52.39.159.250 |
10ay.online.tableau.com (10AY) | US West - Oregon | us-west-2 | 34.218.129.202 52.40.235.24 |
10az.online.tableau.com (10AZ) | US West - Oregon | us-west-2 | 34.218.83.207 52.37.252.60 |
us-west-2b.online.tableau.com (UW2B) | US West - Oregon | us-west-2 | 34.214.85.34 34.214.85.244 |
us-east-1.online.tableau.com (useeast-1) | US East - Virginia | us-east-1 | 50.17.26.34 52.206.162.101 |
| prod-useast-a.online.tableau.com (prod-useast-a) | US East - Virginia | us-east-1 | 3.219.176.16/28 |
prod-useast-b.online.tableau.com (prod-useast-b) | US East - Virginia | us-east-1 | 3.219.176.16/28 |
dub01.online.tableau.com (DUB01) | EU West - Ireland Note: After the move to Hyperforce, region will move to Germany. For more information, see Tableau Cloud Migration to Hyperforce(Link opens in a new window) knowledge article. | eu-central-1 | 34.246.74.86 52.215.158.213 |
eu-west-1a.online.tableau.com (EWA1) | EU West - Ireland Note: After the move to Hyperforce, region will move to Germany. For more information, see Tableau Cloud Migration to Hyperforce(Link opens in a new window) knowledge article. | eu-central-1 | 34.246.62.141 34.246.62.203 |
prod-apnortheast-a.online.tableau.com (prod-apnortheast-a) | Asia Pacific - Japan | ap-southeast-1 | 18.176.203.96/28 |
prod-apsoutheast-a.online.tableau.com (prod-apsoutheast-b) | Asia Pacific – Australia | ap-southeast-2 | 3.25.37.32/28 |
prod-uk-a.online.tableau.com (prod-uk-a) | EU West - UK | eu-west-2 | 18.134.84.240/28 |
prod-ca-a.online.tableau.com (prod-ca-a) | Canada - Quebec | ca-central-1 |
|
Find authorisation steps for your data provider
The following links take you to the steps on common data providers’ websites for authorising external applications on their platforms.
Amazon:
Microsoft Azure(Link opens in a new window)
Google Cloud Platform(Link opens in a new window)
Disclaimer: The links in the list above take you outside of Tableau.com. Although we make every effort to ensure links to external websites are accurate, up to date and relevant, Tableau cannot take responsibility for the accuracy or freshness of pages maintained by external providers. Contact the external site for answers to questions regarding its content.
Tableau Bridge connections to Tableau Cloud
To facilitate connections between on-premises data and Tableau Cloud, Tableau Bridge uses common port 443 to make outbound requests to Tableau Cloud. For more information, see Network access section in the Install Tableau Bridge topic.
See also
Keep Data Fresh(Link opens in a new window) (Tableau Cloud Help)