Starburst Documentation
Starburst Galaxy
  • Starburst Galaxy Home
  •   Get started
  •   Global features
  • Help center
  • Release notes
  • Feature release types
  • Starburst Galaxy UI
  •   Query
  •   Catalogs
  •   Catalog explorer
  •   Data products
  •   Clusters
  • Partner connect
  •   Admin
  •   Access control
  •   Cloud settings
  • Administration
  •   Security
  •   Single sign-on
  •   Troubleshooting
  • Galaxy status
  • Reference
  •   Python
  • API
  •   SQL
  •   Tutorials

    • starburst galaxy > security > IP allowlist for Starburst Galaxy

    IP allowlist for Starburst Galaxy #

    Typically, a secured database does not allow open access from any source on the Internet. Network access is restricted to only allow connection within the local network or cloud region. These systems can be configured to allow access from a remote IP address or an IP address range, typically represented as a Classless Inter-Domain Routing (CIDR) block.

    The lists on this page show the CIDR blocks from which Starburst Galaxy can initiate communication for each region. Use this information to allow incoming communication from a Starburst Galaxy cluster to an SSH tunnel’s bastion host, or to a secure cloud-based data source, or to any data source with restricted firewall rules.

    In order for Starburst Galaxy to establish a connection to a secured data source, you must configure it to allow connections from all IP address ranges used by your Starburst Galaxy clusters.

    Specify the IP range values for each region where your data source is located. For example, if your clusters are located in the Asia Pacific, US West, and Eastern Europe regions, you must configure your data sources to allow connections from the Galaxy IP address ranges of all three regions.

    Amazon Web Services #

    The following table lists IP ranges used by Starburst Galaxy in Amazon Web Services (AWS) regions:

    Cloud region ID Cloud name IP range (CIDR)
    ap-northeast-1 Asia Pacific (Tokyo) 35.76.250.32/28
    ap-southeast-1 Asia Pacific (Singapore) 13.215.93.192/28
    ap-southeast-2 Asia Pacific (Sydney) 3.26.132.144/28
    ca-central-1 Canada (Central) 3.99.65.192/28
    eu-central-1 Europe (Frankfurt) 3.69.198.224/28
    eu-west-1 Europe (Ireland) 3.251.214.176/28
    eu-west-2 Europe (London) 13.40.1.48/28
    eu-west-3 Europe (Paris) 13.38.68.0/28
    us-east-1 US East (N. Virginia) 44.199.94.112/28
    us-east-2 US East (Ohio) 3.144.141.32/28
    us-west-1 US West (N. California) 3.101.194.112/28
    us-west-2 US West (Oregon) 35.85.225.64/28

    Google Cloud #

    The following table lists IP ranges used by Starburst Galaxy in Google Cloud regions:

    Region name IP range (CIDR)
    asia-south1 35.200.131.200/30
    asia-southeast1 35.240.195.240/30
    europe-west2 35.197.227.196/30
    europe-west6 34.64.130.76/30
    northamerica-northeast1 34.118.129.99/32*
    34.152.45.144/32*
    35.203.81.144/32*
    southamerica-east1 35.199.83.196/30
    us-central1 35.184.163.184/30
    us-east1 104.196.104.196/30

    *Temporary assignments. Final IP block to be assigned later.

    Microsoft Azure #

    The following table lists IP ranges used by Starburst Galaxy in Microsoft Azure regions:

    Region name IP range (CIDR)
    Central India (Asia Pacific) 20.219.159.0/28
    East US (US) 52.191.69.16/28
    East US 2 (US) 20.41.27.32/28
    France Central (Europe) 20.111.62.192/28
    South Central US (US) 40.84.219.192/28
    West Europe (Europe) 20.73.86.112/28