Allowlisting domain names and IP addresses
Working with Qlik Cloud involves both inbound and outbound connection flows. Inbound traffic, from Qlik Cloud to customer environments, such as SMTP and webhooks, goes through a NAT gateway and uses static IP addresses. Outbound traffic, from customer environments to Qlik Cloud, such as API calls, Multi-cloud, or starting a Qlik Cloud session, goes through a load balancer and uses dynamic IP addresses.
Inbound traffic - allowlisting IP addresses
Inbound traffic is static, which simplifies allowlisting of IP addresses.
Static IP addresses for traffic coming from Qlik Cloud
Data connection requests are made from Qlik Cloud regions. You can identify your region based on your Qlik Cloud domain name: <tenantname>.<region>.qlikcloud.com. To request data from your data connections through a firewall, you need to add the underlying IP addresses for your region to your allowlist. These addresses are static and will not change.
Region | Analytics and Data Integration | Application Automation |
---|---|---|
Americas (us) | 18.205.71.36 18.232.32.199 34.237.68.254 |
18.235.133.252 3.217.244.242 18.214.8.201 |
Ireland (eu) | 34.247.21.179 52.31.212.214 54.154.95.18 |
54.216.156.88 3.248.156.131 52.213.44.55 |
Frankfurt (de) | 3.76.162.169 3.77.162.68 3.122.137.91 |
3.69.132.138 3.69.222.86 3.72.136.160 |
London (uk) | 13.42.141.246 18.135.245.97 35.179.0.171 |
18.168.120.199 18.169.91.38 13.42.135.168 |
Singapore (sg) | 18.138.163.172 18.142.157.182 54.179.13.251 |
54.169.84.213 13.213.173.37 13.213.113.162 |
Australia (ap) | 13.210.43.241 13.236.104.42 13.236.206.172 |
54.206.158.27 3.104.137.20 3.24.52.178 |
Japan (jp) | 54.238.168.131 3.113.68.20 35.73.207.58 |
35.77.238.13 13.115.58.233 35.74.220.230 |
Outbound traffic - allowlisting domain names and IP addresses
Finding IP addresses
If you need to use an IP address to connect to Qlik Cloud, you can use nslookup. In the following example you look up the IP number of your tenant.
-
Open a command prompt.
-
Enter nslookup <tenantname>.<region>.qlikcloud.com, where you replace <tenantname>.<region> with your tenant name and region.
Example: nslookup mytenantname.myregion.qlikcloud.com
-
Copy the returned IP address.
However, keep in mind that the IP addresses of Qlik Cloud services rotate and can change at any time without notice, invalidating any access rules relying on them. Whenever possible, configure the allowlist for the domain name.
Qlik Cloud domains allowlist
Add domains that Qlik Cloud uses to fetch static resources to the allowlist.
-
fonts.googleapis.com
-
fonts.gstatic.com
-
help.qlik.com
-
app.launchdarkly.com
-
events.launchdarkly.com
-
www.youtube-nocookie.com
-
i.ytimg.com
-
cdn.pendo.io
-
www.google-analytics.com
-
api.qlikdataengineering.com
-
sqs.us-east-1.amazonaws.com
-
pendo-static-5763789454311424.storage.googleapis.com
-
*.fullstory.com
-
*.qlikcloud.com
-
api.rollbar.com
-
gravatar.com
-
www.qlik.com
-
login.qlik.com
-
myqlik.qlik.com
-
cdn.myqlik.qlik.com
-
www.zuora.com
-
cdn.auth0.com
-
cdn.polyfill.io
-
cdnjs.cloudflare.com