Observable public IP addresses?

I’m trying to connect Observable to my Google Cloud Platform PostgreSQL database.
However in order for GCP to accept the incoming connections, I need to first whitelist the public IP address(es) of Observable:

I tried with the following (from checking the DNS provider), but GCP doesn’t seem to be willing to connect:

  • 172.67.68.236
  • 104.26.9.36
  • 104.26.8.36

Could anyone point me at the right public IP addresses?
Or point me at any other way of getting both systems connected in case I’m doing anything wrong :slight_smile:

Thanks in advance!

Note: solved it by whitelisting all connections (0.0.0.0/0), yet I’d feel much more comfortable if I could whitelist Observables’ incoming connections only.

This is an admittedly unsatisfying answer, but our outbound IP range for database connections could really be the entire AWS IP range. Using that large list is technically better than 0.0.0.0/0, but is probably a chore to import and manage and arguably still leaves you open to too many IPs.

We’ll consider ways to limit this down to a more manageable set though.

2 Likes

Thanks for the follow-up @visnup!

@visnup Why not use an Elastic IP?

Elastic IP is on the list to investigate if we can use for this. Need to research how to use it and the best way to proxy TCP traffic.

@visnup has there been any progress on this? Whitelisting 0.0.0.0/0 is somewhat uncomfortable.

Context: Setting up Observable Teams for my company. Many of my notebooks use Databases via the proxy, but one of the goals in using Observable Teams is to share with co-workers and leadership who are not really the target market for setting up their own proxy.

Hi. Good news… we have an update!

Our Enterprise tier (see Pricing / Observable) now has support for fixed IP addresses for our hosted database connectors. It is not published there yet, since it is fairly new, but if you would like to explore upgrading your team to an Enterprise team, please reach out to sales@observablehq.com so we can discuss the details.

Ah, well that does sound nice. Unfortunately (for me), just getting us to get Teams was a “thing” so I probably can’t do that.