IP addresses and domains for Databricks services and assets

This article lists:

IP addresses and domains for Databricks services and assets.
Private Service Connect attachment URLs and project numbers.

You may need this information if you are configuring your Databricks workspace to limit network egress using a firewall.

Databricks control plane addresses

The following tables list the IP addresses or domain names the Databricks control plane uses for each supported region.

For a complete list of ports to configure in your security group egress rules, see Firewall configuration overview.

Inbound IPs to Databricks control plane

warning

Always allowlist the provided domain names (FQDNs) for secure cluster connectivity (SCC) relay endpoints, rather than individual IP addresses. IP addresses behind these domains change periodically due to infrastructure updates and multi-availability zone deployments. Customers who allowlist specific IP addresses may experience service disruptions when infrastructure changes occur. If you must use IP addresses, implement automated DNS resolution and regularly update your firewall rules.

Google Cloud region	Service	Public IP, domain name, or project number
`asia-northeast1`	Control Plane services, including webapp	`34.146.235.35`, `34.146.146.176/28`, `34.8.0.0/28`
	SCC relay	`35.194.116.253`, `tunnel.asia-northeast1.gcp.databricks.com`
	SCC relay for Private Service Connect	`projects/prod-gcp-asia-northeast1/regions/asia-northeast1/serviceAttachments/ngrok-psc-endpoint`
`asia-southeast1`	Control Plane services, including webapp	`34.126.133.240`, `34.143.162.160/28`, `34.8.0.0/28`
	SCC relay	`34.126.173.244`, `tunnel.asia-southeast1.gcp.databricks.com`
	SCC relay for Private Service Connect	`projects/prod-gcp-asia-southeast1/regions/asia-southeast1/serviceAttachments/ngrok-psc-endpoint`
`asia-south1`	Control Plane services, including webapp	`34.100.245.214`, `34.47.163.96/28`, `34.8.0.0/28`
	SCC relay	`34.93.224.111`, `tunnel.asia-south.gcp.databricks.com`
	SCC relay for Private Service Connect	`projects/prod-gcp-asia-south1/regions/asia-south1/serviceAttachments/ngrok-psc-endpoint`
`australia-southeast1`	Control Plane services, including webapp	`35.244.88.131`, `34.40.128.0/28`, `34.8.0.0/28`
	SCC relay	`35.244.79.84`, `tunnel.australia-southeast1.gcp.databricks.com`
	SCC relay for Private Service Connect	`projects/prod-gcp-australia-southeast1/regions/australia-southeast1/serviceAttachments/ngrok-psc-endpoint`
`europe-west1`	Control Plane services, including webapp	`35.190.193.117`, `34.38.159.16/28`, `34.8.0.0/28`
	SCC relay	`146.148.117.238`, `tunnel.europe-west1.gcp.databricks.com`
	SCC relay for Private Service Connect	`projects/prod-gcp-europe-west1/regions/europe-west1/serviceAttachments/ngrok-psc-endpoint`
`europe-west2`	Control Plane services, including webapp	`34.89.123.127`, `34.39.0.32/28`, `34.8.0.0/28`
	SCC relay	`34.105.148.92`, `tunnel.europe-west2.gcp.databricks.com`
	SCC relay for Private Service Connect	`projects/prod-gcp-europe-west2/regions/europe-west2/serviceAttachments/ngrok-psc-endpoint`
`europe-west3`	Control Plane services, including webapp	`34.159.208.230`, `34.89.210.112/28`, `34.8.0.0/28`
	SCC relay	`34.159.237.82`, `tunnel.europe-west3.gcp.databricks.com`
	SCC relay for Private Service Connect	`projects/prod-gcp-europe-west3/regions/europe-west3/serviceAttachments/ngrok-psc-endpoint`
`northamerica-northeast1`	Control Plane services, including webapp	`34.152.60.53`, `34.118.158.176/28`, `34.8.0.0/28`
	SCC relay	`34.95.40.58`, `tunnel.northamerica-northeast1.gcp.databricks.com`
	SCC relay for Private Service Connect	`projects/prod-gcp-northamerica-northeast1/regions/northamerica-northeast1/serviceAttachments/ngrok-psc-endpoint`
`southamerica-east1`	Control Plane services, including webapp	`35.198.61.240`, `34.39.157.192/28`, `34.8.0.0/28`
	SCC relay	`34.151.254.25`, `tunnel.southamerica-east1.gcp.databricks.com`
	SCC relay for Private Service Connect	`projects/prod-gcp-southamerica-east1/regions/southamerica-east1/serviceAttachments/ngrok-psc-endpoint`
`us-central1`	Control Plane services, including webapp	`34.72.196.197`, `34.128.32.16/28`, `34.8.0.0/28`
	SCC relay	`35.224.199.248`, `tunnel.us-central1.gcp.databricks.com`
	SCC relay for Private Service Connect	`projects/prod-gcp-us-central1/regions/us-central1/serviceAttachments/ngrok-psc-endpoint`
`us-east1`	Control Plane services, including webapp	`34.139.33.52`, `34.138.66.176/28`, `34.8.0.0/28`
	SCC relay	`34.138.156.37`, `tunnel.us-east1.gcp.databricks.com`
	SCC relay for Private Service Connect	`projects/prod-gcp-us-east1/regions/us-east1/serviceAttachments/ngrok-psc-endpoint`
`us-east4`	Control Plane services, including webapp	`34.86.133.227`, `34.145.222.16/28`, `34.8.0.0/28`
	SCC relay	`34.86.176.48`, `tunnel.us-east4.gcp.databricks.com`
	SCC relay for Private Service Connect	`projects/prod-gcp-us-east4/regions/us-east4/serviceAttachments/ngrok-psc-endpoint`
`us-west1`	Control Plane services, including webapp	`35.185.196.216`, `34.118.194.80/28`, `34.8.0.0/28`
	SCC relay	`34.105.33.108`, `tunnel.us-west1.gcp.databricks.com`
	SCC relay for Private Service Connect	`projects/prod-gcp-us-west1/regions/us-west1/serviceAttachments/ngrok-psc-endpoint`
`us-west4`	Control Plane services, including webapp	`34.125.26.53`, `34.16.224.32/28`, `34.8.0.0/28`
	SCC relay	`34.125.31.85`, `tunnel.us-west4.gcp.databricks.com`
	SCC relay for Private Service Connect	`projects/prod-gcp-us-west4/regions/us-west4/serviceAttachments/ngrok-psc-endpoint`

Outbound IPs from Databricks control plane

Google Cloud Region	Service	Public IP
`asia-northeast1`	Control Plane NAT	`34.146.86.3`, `34.146.146.176/28`
`asia-southeast1`	Control Plane NAT	`34.87.145.17`, `34.143.162.160/28`
`asia-south1`	Control Plane NAT	`34.93.172.236`, `34.47.163.96/28`
`australia-southeast1`	Control Plane NAT	`34.87.224.132`, `34.40.128.0/28`
`europe-west1`	Control Plane NAT	`35.187.166.222`, `34.38.159.16/28`
`europe-west2`	Control Plane NAT	`34.105.190.3`, `34.39.0.32/28`
`europe-west3`	Control Plane NAT	`35.198.69.110`, `34.89.210.112/28`
`northamerica-northeast1`	Control Plane NAT	`34.152.10.135`, `34.118.158.176/28`
`southamerica-east1`	Control Plane NAT	`34.95.225.209/32`, `34.39.157.192/28`
`us-central1`	Control Plane NAT	`34.123.97.237`, `34.128.32.16/28`
`us-east1`	Control Plane NAT	`35.196.217.150`, `34.138.66.176/28`
`us-east4`	Control Plane NAT	`35.186.178.4`, `34.145.222.16/28`
`us-west1`	Control Plane NAT	`34.82.78.230`, `34.118.194.80/28`
`us-west4`	Control Plane NAT	`34.125.175.166`, `34.16.224.32/28`

Addresses for default metastore

Port 3306 is used for the default metastore.

Google Cloud Region	Service	Public IP
`asia-northeast1`	Default metastore	`34.146.146.24`
`asia-southeast1`	Default metastore	`34.126.101.226`
`asia-south1`	Default metastore	34.93.83.239`
`australia-southeast1`	Default metastore	`34.151.73.114`
`europe-west1`	Default metastore	`34.76.244.202`
`europe-west2`	Default metastore	`35.242.155.96`
`europe-west3`	Default metastore	`34.159.152.178`
`northamerica-northeast1`	Default metastore	`35.203.33.132`
`southamerica-east1`	Default metastore	`34.39.151.83`
`us-central1`	Default metastore	`35.239.64.150`
`us-east1`	Default metastore	`34.74.134.43`
`us-east4`	Default metastore	`35.245.195.96`
`us-west1`	Default metastore	`34.82.108.36`
`us-west4`	Default metastore	`34.125.124.68`

Private Service Connect (PSC) attachment URIs and project numbers

If you want to enable Google Private Service Connect (PSC) on a workspace, you might need the PSC service attachment URIs and project numbers for your workspace region, listed here.

See Enable Private Service Connect for your workspace.

asia-northeast1
- Workspace: projects/general-prod-asianortheast1-01/regions/asia-northeast1/serviceAttachments/plproxy-psc-endpoint-all-ports
- SCC relay: projects/prod-gcp-asia-northeast1/regions/asia-northeast1/serviceAttachments/ngrok-psc-endpoint
- Control plane VPC host project #: 76016113524, 758372176987
- Control plane asset project #: 643670579914
- Control plane Unity Catalog project #: 923768640139
- Audit log delivery project #: 85638097580
- System tables project #: 68598579867
- System tables Google Service Account: db-uc-storage-066pps838s-wqiyf@uc-asianeast1.iam.gserviceaccount.com
asia-south1
- Workspace: projects/gen-prod-asias1-01/regions/asia-south1/serviceAttachments/plproxy-psc-endpoint-all-ports
- SCC relay: projects/prod-gcp-asia-south1/regions/asia-south1/serviceAttachments/ngrok-psc-endpoint
- Control plane VPC host project #: 330071231143, 631686578243
- Control plane asset project #: 643670579914
- Control plane Unity Catalog project #: 570609266169
- Audit log delivery project #: 85638097580
- System tables project #: 68598579867
- System tables Google Service Account: db-uc-storage-067h53patg-btqhx@uc-asias1.iam.gserviceaccount.com
asia-southeast1
- Workspace: projects/general-prod-asiasoutheast1-01/regions/asia-southeast1/serviceAttachments/plproxy-psc-endpoint-all-ports
- SCC relay: projects/prod-gcp-asia-southeast1/regions/asia-southeast1/serviceAttachments/ngrok-psc-endpoint
- Control plane VPC host project #: 163855694937, 1034099807081
- Control plane asset project #: 643670579914
- Control plane Unity Catalog project #: 997754390120
- Audit log delivery project #: 85638097580
- System tables project #: 68598579867
- System tables Google Service Account: db-uc-storage-066ppse4ng-ghu5q@uc-asiasoutheast1.iam.gserviceaccount.com
australia-southeast1
- Workspace: projects/general-prod-ausoutheast1-01/regions/australia-southeast1/serviceAttachments/plproxy-psc-endpoint-all-ports
- SCC relay: projects/prod-gcp-australia-southeast1/regions/australia-southeast1/serviceAttachments/ngrok-psc-endpoint
- Control plane VPC host project #: 890675851652, 857749035294
- Control plane asset project #: 643670579914
- Control plane Unity Catalog project #: 1098168977388
- Audit log delivery project #: 85638097580
- System tables project #: 68598579867
- System tables Google Service Account: db-uc-storage-066ppskjuk-oh5z9@uc-ausoutheast1.iam.gserviceaccount.com
europe-west1
- Workspace: projects/general-prod-europewest1-01/regions/europe-west1/serviceAttachments/plproxy-psc-endpoint-all-ports
- SCC relay: projects/prod-gcp-europe-west1/regions/europe-west1/serviceAttachments/ngrok-psc-endpoint
- Control plane VPC host project #: 623104702041, 539637529424
- Control plane asset project #: 643670579914
- Control plane Unity Catalog project #: 837221441770
- Audit log delivery project #: 85638097580
- System tables project #: 68598579867
- System tables Google Service Account: db-uc-storage-066ppsqf0k-uej7u@uc-euwest1.iam.gserviceaccount.com
europe-west2
- Workspace: projects/general-prod-europewest2-01/regions/europe-west2/serviceAttachments/plproxy-psc-endpoint-all-ports
- SCC relay: projects/prod-gcp-europe-west2/regions/europe-west2/serviceAttachments/ngrok-psc-endpoint
- Control plane VPC host project #: 204760216014, 374166936325
- Control plane asset project #: 643670579914
- Control plane Unity Catalog project #: 751957430136
- Audit log delivery project #: 85638097580
- System tables project #: 68598579867
- System tables Google Service Account: db-uc-storage-066ppsvq4g-qufud@uc-euwest2.iam.gserviceaccount.com
europe-west3
- Workspace: projects/general-prod-europewest3-01/regions/europe-west3/serviceAttachments/plproxy-psc-endpoint-all-ports
- SCC relay: projects/prod-gcp-europe-west3/regions/europe-west3/serviceAttachments/ngrok-psc-endpoint
- Control plane VPC host project #: 622303457766, 281723498678
- Control plane asset project #: 643670579914
- Control plane Unity Catalog project #: 691428682010
- Audit log delivery project #: 85638097580
- System tables project #: 68598579867
- System tables Google Service Account: db-uc-storage-066ppt54is-keeep@uc-europewest3.iam.gserviceaccount.com
northamerica-northeast1
- Workspace: projects/general-prod-nanortheast1-01/regions/northamerica-northeast1/serviceAttachments/plproxy-psc-endpoint-all-ports
- SCC relay: projects/prod-gcp-na-northeast1/regions/northamerica-northeast1/serviceAttachments/ngrok-psc-endpoint
- Control plane VPC host project #: 878472879812, 67008890036
- Control plane asset project #: 643670579914
- Control plane Unity Catalog project #: 262684322583
- Audit log delivery project #: 85638097580
- System tables project #: 68598579867
- System tables Google Service Account: db-uc-storage-066ppt9s00-wp6b1@uc-nanortheast1.iam.gserviceaccount.com
southamerica-east1
- Workspace: projects/gen-prod-saeast1-01/regions/southamerica-east1/serviceAttachments/plproxy-psc-endpoint-all-ports
- SCC relay: projects/prod-gcp-southamerica-east1/regions/southamerica-east1/serviceAttachments/ngrok-psc-endpoint
- Control plane VPC host project #: 299178298712, 120952445555
- Control plane asset project #: 643670579914
- Control plane Unity Catalog project #: 974325785393
- Audit log delivery project #: 85638097580
- System tables project #: 68598579867
- System tables Google Service Account: db-uc-credential-06bmfntfis-yk@uc-saeast1.iam.gserviceaccount.com
us-central1
- Workspace: projects/gcp-prod-general/regions/us-central1/serviceAttachments/plproxy-psc-endpoint-all-ports
- SCC relay: projects/prod-gcp-us-central1/regions/us-central1/serviceAttachments/ngrok-psc-endpoint
- Control plane VPC host project #: 68422481410, 52212564371
- Control plane asset project #: 643670579914
- Control plane Unity Catalog project #: 683414710976
- Audit log delivery project #: 85638097580
- System tables project #: 68598579867
- System tables Google Service Account: db-uc-storage-066molu6ek-znwhn@uc-uscentral1.iam.gserviceaccount.com
us-east1
- Workspace: projects/general-prod-useast1-01/regions/us-east1/serviceAttachments/plproxy-psc-endpoint-all-ports
- SCC relay: projects/prod-gcp-us-east1/regions/us-east1/serviceAttachments/ngrok-psc-endpoint
- Control plane VPC host project #: 51066298900, 126331279425
- Control plane asset project #: 643670579914
- Control plane Unity Catalog project #: 234110679923
- Audit log delivery project #: 85638097580
- System tables project #: 68598579867
- System tables Google Service Account: db-uc-storage-066pptsgmg-dkbon@uc-useast1.iam.gserviceaccount.com
us-east4
- Workspace: projects/general-prod-useast4-01/regions/us-east4/serviceAttachments/plproxy-psc-endpoint-all-ports
- SCC relay: projects/prod-gcp-us-east4/regions/us-east4/serviceAttachments/ngrok-psc-endpoint
- Control plane VPC host project #: 121886670913, 263270992834
- Control plane asset project #: 643670579914
- Control plane Unity Catalog project #: 522339604799
- Audit log delivery project #: 85638097580
- System tables project #: 68598579867
- System tables Google Service Account: db-uc-storage-066moil41c-xy2gx@uc-useast4.iam.gserviceaccount.com
us-west1
- Workspace: projects/general-prod-uswest1-01/regions/us-west1/serviceAttachments/plproxy-psc-endpoint-all-ports
- SCC relay: projects/prod-gcp-us-west1/regions/us-west1/serviceAttachments/ngrok-psc-endpoint
- Control plane VPC host project #: 646990673688, 121996733804
- Control plane asset project #: 643670579914
- Control plane Unity Catalog project #: 563665329883
- Audit log delivery project #: 85638097580
- System tables project #: 68598579867
- System tables Google Service Account: db-uc-storage-066ppueukg-tyrut@uc-uswest1.iam.gserviceaccount.com
us-west4
- Workspace: projects/general-prod-uswest4-01/regions/us-west4/serviceAttachments/plproxy-psc-endpoint-all-ports
- SCC relay: projects/prod-gcp-us-west4/regions/us-west4/serviceAttachments/ngrok-psc-endpoint
- Control plane VPC host project #: 321004414578, 863141203972
- Control plane asset project #: 643670579914
- Control plane Unity Catalog project #: 543816255200
- Audit log delivery project #: 85638097580
- System tables Google Service Account: db-uc-storage-066ppujprs-v06wt@uc-uswest4.iam.gserviceaccount.com

Reserved IP ranges for Databricks internal use

Databricks reserves certain IP ranges for internal applications to avoid potential IP conflicts. Customers should avoid using these ranges in their network configurations:

127.187.216.0/24
192.168.216.0/24
198.18.216.0/24

These reserved IP ranges apply to all types of workspaces and all cluster types, including classic and serverless clusters, as well as Databricks Container Service clusters.

Databricks Container Service clusters

For Databricks Container Service (DCS) clusters, you should also avoid using the default Docker network range:

172.17.0.0/16

By reserving these IP ranges for Databricks internal use and avoiding the default Docker network range for DCS clusters, you can help prevent potential IP conflicts and ensure the smooth operation of your Databricks environment.

Databricks control plane addresses​

Inbound IPs to Databricks control plane​

Outbound IPs from Databricks control plane​

Addresses for default metastore​

Private Service Connect (PSC) attachment URIs and project numbers​

Reserved IP ranges for Databricks internal use​

Databricks Container Service clusters​