Skip to main content

Static Egress IPs

Landed uses fixed IP addresses for all outbound connections to your data sources. If your infrastructure requires firewall allowlisting (e.g., databases behind a VPC, APIs restricted by IP), add the IPs below.

Production​

IP AddressPurpose
34.170.185.84Primary egress
35.192.90.94Primary egress

Staging​

IP AddressPurpose
34.171.93.34Staging egress
info

Staging IPs are only relevant if you are testing Landed against a staging or development environment. Most customers only need the production IPs.

Allowlisting Instructions​

AWS Security Groups​

  1. Open the EC2 console and navigate to Security Groups.
  2. Select the security group attached to your database or service.
  3. Under Inbound rules, click Edit inbound rules.
  4. Add two rules:
    • Type: Custom TCP | Port range: your service port (e.g., 5432 for PostgreSQL) | Source: 34.170.185.84/32
    • Type: Custom TCP | Port range: your service port | Source: 35.192.90.94/32
  5. Click Save rules.

GCP Firewall Rules​

  1. Open the VPC Firewall rules page.
  2. Click Create Firewall Rule.
  3. Configure:
    • Name: allow-landed-ingress
    • Direction: Ingress
    • Targets: Select the target tag or service account for your resource
    • Source IP ranges: 34.170.185.84/32, 35.192.90.94/32
    • Protocols and ports: TCP on your service port
  4. Click Create.

Azure Network Security Groups​

  1. Open the Network security groups page.
  2. Select the NSG attached to your resource.
  3. Under Inbound security rules, click Add.
  4. Configure:
    • Source: IP Addresses
    • Source IP addresses: 34.170.185.84, 35.192.90.94
    • Destination port ranges: your service port
    • Protocol: TCP
    • Action: Allow
    • Name: allow-landed
  5. Click Add.

Generic / On-Premises Firewalls​

Allow inbound TCP connections from the following CIDR blocks on the port(s) your data source listens on:

34.170.185.84/32
35.192.90.94/32

FAQ​

Will these IPs change? We will provide at least 30 days notice before any IP change. Notifications are sent via email and displayed in the Landed dashboard.

Do I need to allowlist both production IPs? Yes. Landed may route traffic through either IP. Both must be allowlisted for reliable connectivity.

What about IPv6? Landed currently uses IPv4 only. IPv6 support is on our roadmap.