Share via

How to generate a static IP for ADF to connect to Third party SFTP server

Pankaj Palta 10 Reputation points
2024-01-27T00:03:56.6566667+00:00

Hello All, I want to connect to third party SFTP server and donwload the files in AzureContainer. In order to connect to the SFTP I need to provide them with a IP address (Not range) so they can whitelist it. I will be using ADF SFTP connector to connect to the server. How can I generate a static IP address that I can get whitelisted. Any help will be appraacited. Thanks in advance.

Azure SQL Database
Azure Data Lake Storage
Azure Data Lake Storage
An Azure service that provides an enterprise-wide hyper-scale repository for big data analytic workloads and is integrated with Azure Blob Storage.
1,559 questions
Azure Data Factory
Azure Data Factory
An Azure service for ingesting, preparing, and transforming data at scale.
11,624 questions
Azure Static Web Apps
Azure Static Web Apps
An Azure service that provides streamlined full-stack web app development.
1,173 questions
Microsoft Security Microsoft Authenticator

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Nandan Hegde 36,146 Reputation points MVP Volunteer Moderator
    2024-01-27T03:39:25.92+00:00

    In case if there is a requirement to have a single static ip address, then you need to leverage a self hosted integration runtime to connect to the sftp

  2. AnnuKumari-MSFT 34,556 Reputation points Microsoft Employee Moderator
    2024-01-29T11:05:27.06+00:00

    Hi Pankaj Palta ,

    Welcome to Microsoft Q&A platform and thanks for posting your query here.

    You can whitelist IP ranges for the particular Azure integration runtime region to ensure you don’t have to allow all Azure IP addresses in your cloud data stores. This way, you can restrict the IP addresses that are permitted to access the data stores.

    If required, you can always set up a Self-hosted Integration Runtime and use your Static IP with it. 

    • Unique Static IP - You will need to set up a self-hosted integration runtime to get a Static IP for Data Factory connectors. This mechanism ensures you can block access from all other IP addresses. If you use Azure-SSIS integration runtime, you can bring your own static public IP addresses (BYOIP) to allow in your firewall rules, see this blog.
    • Static IP range - You can use Azure Integration Runtime's IP addresses to whitelist it in your storage (say S3, Salesforce, etc.). It certainly restricts IP addresses that can connect to the data stores but also relies on Authentication/ Authorization rules. 

    For more details , kindly checkout the following documentations:

    https://techcommunity.microsoft.com/t5/azure-data-factory-blog/azure-data-factory-now-supports-static-ip-address-ranges/ba-p/1117508

    https://learn.microsoft.com/en-us/azure/data-factory/azure-integration-runtime-ip-addresses

    Hope it helps. Kindly accept the answer by clicking on Accept answer button. Thankyou

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.