Hightouch can connect directly to services running within your private network, including your data warehouse, self-hosted destinations, and even tools like a private Git server or your own hosted Looker deployment.
For added security, consider using an SSH tunnel to layer on public key-based authentication and encryption.
Choose a connection method
Hightouch supports three ways to reach services inside your network. You can start with one method and move to another later.
| Method | When to use it | What you need |
|---|---|---|
| IP allowlisting | Your service is reachable from the public internet. | Add Hightouch's IP addresses for your region to your firewall allowlist. |
| SSH tunneling | Your service is on a private network. | A bastion host reachable from the internet (standard tunnel), or an SSH connection you keep open to Hightouch (reverse tunnel). |
| Private connectivity: AWS PrivateLink, GCP Private Service Connect, or Azure Private Link | You want traffic between Hightouch and your service to stay off the public internet. | A Business tier workspace and a supported service. Each page lists the services it supports. |
IP addresses
Many private networks need to be configured to allow external connections. You can provide Hightouch access by adding Hightouch's IP addresses to your firewall allowlist.
Ensure you configure your network firewall rules to allow access from only the IP addresses corresponding to the region you selected when you created your Hightouch workspace.
Amazon Web Services
| Region | IP Addresses |
|---|---|
| ap-south-1 (Mumbai, India) | 13.126.190.713.201.148.23865.1.90.146 |
| ap-southeast-2 (Sydney, Australia) | 3.104.61.9913.54.27.6213.238.99.151 |
| eu-west-1 (Ireland) | 34.255.226.21252.16.84.19952.211.114.138 |
| us-east-1 (N. Virginia, USA) | 54.196.30.16952.72.201.21318.213.226.963.224.126.1973.217.26.199 |
Google Cloud Platform
| Region | IP Addresses |
|---|---|
| europe-west1 (Belgium) | 35.241.218.18335.195.167.179104.199.61.185 |
| me-central2 (Dammam, Saudi Arabia) | 34.166.244.4434.166.247.3234.166.115.20 |
| us-east4 (N. Virginia, USA) | 34.145.155.14835.245.150.7135.245.58.91 |
Microsoft Azure
| Region | IP Addresses Ranges |
|---|---|
| East US (N. Virginia) | 23.100.16.164/30 |