IP addresses and domains for Databricks services and assets

This article lists:

IP addresses and domains for Databricks services and assets.
Private Service Connect attachment URLs and project numbers.

You may need this information if you are configuring your Databricks workspace to limit network egress using a firewall.

Databricks control plane addresses

The following tables list the IP addresses or domain names the Databricks control plane uses for each supported region.

For a complete list of ports to configure in your security group egress rules, see Firewall configuration overview.

Inbound IPs to Databricks control plane

warning

Always allowlist the provided domain names (FQDNs) for secure cluster connectivity (SCC) relay endpoints, rather than individual IP addresses. IP addresses behind these domains change periodically due to infrastructure updates and multi-availability zone deployments. Customers who allowlist specific IP addresses may experience service disruptions when infrastructure changes occur. If you must use IP addresses, implement automated DNS resolution and regularly update your firewall rules.

Google Cloud region	Service	Public IP, domain name, or project number
`asia-northeast1`	Control Plane services, including default storage and webapp	`34.146.235.35`, `34.146.146.176/28`, `34.8.0.0/28`
	SCC relay	`35.194.116.253`, `tunnel.asia-northeast1.gcp.databricks.com`
	SCC relay for Private Service Connect	`projects/prod-gcp-asia-northeast1/regions/asia-northeast1/serviceAttachments/ngrok-psc-endpoint`
`asia-southeast1`	Control Plane services, including default storage and webapp	`34.126.133.240`, `34.143.162.160/28`, `34.8.0.0/28`
	SCC relay	`34.126.173.244`, `tunnel.asia-southeast1.gcp.databricks.com`
	SCC relay for Private Service Connect	`projects/prod-gcp-asia-southeast1/regions/asia-southeast1/serviceAttachments/ngrok-psc-endpoint`
`asia-south1`	Control Plane services, including default storage and webapp	`34.100.245.214`, `34.47.163.96/28`, `34.8.0.0/28`
	SCC relay	`34.93.224.111`, `tunnel.asia-south.gcp.databricks.com`
	SCC relay for Private Service Connect	`projects/prod-gcp-asia-south1/regions/asia-south1/serviceAttachments/ngrok-psc-endpoint`
`australia-southeast1`	Control Plane services, including default storage and webapp	`35.244.88.131`, `34.40.128.0/28`, `34.8.0.0/28`
	SCC relay	`35.244.79.84`, `tunnel.australia-southeast1.gcp.databricks.com`
	SCC relay for Private Service Connect	`projects/prod-gcp-australia-southeast1/regions/australia-southeast1/serviceAttachments/ngrok-psc-endpoint`
`europe-west1`	Control Plane services, including default storage and webapp	`35.190.193.117`, `34.38.159.16/28`, `34.8.0.0/28`
	SCC relay	`146.148.117.238`, `tunnel.europe-west1.gcp.databricks.com`
	SCC relay for Private Service Connect	`projects/prod-gcp-europe-west1/regions/europe-west1/serviceAttachments/ngrok-psc-endpoint`
`europe-west2`	Control Plane services, including default storage and webapp	`34.89.123.127`, `34.39.0.32/28`, `34.8.0.0/28`
	SCC relay	`34.105.148.92`, `tunnel.europe-west2.gcp.databricks.com`
	SCC relay for Private Service Connect	`projects/prod-gcp-europe-west2/regions/europe-west2/serviceAttachments/ngrok-psc-endpoint`
`europe-west3`	Control Plane services, including default storage and webapp	`34.159.208.230`, `34.89.210.112/28`, `34.8.0.0/28`
	SCC relay	`34.159.237.82`, `tunnel.europe-west3.gcp.databricks.com`
	SCC relay for Private Service Connect	`projects/prod-gcp-europe-west3/regions/europe-west3/serviceAttachments/ngrok-psc-endpoint`
`me-central2`	Control Plane services, including default storage and webapp	`34.166.168.240/28`, `34.8.0.0/28`
	SCC relay	`34.166.162.141`, `tunnel.me-central2.gcp.databricks.com`
	SCC relay for Private Service Connect	`projects/prod-gcp-me-central2/regions/me-central2/serviceAttachments/ngrok-psc-endpoint`
`northamerica-northeast1`	Control Plane services, including default storage and webapp	`34.152.60.53`, `34.118.158.176/28`, `34.8.0.0/28`
	SCC relay	`34.95.40.58`, `tunnel.northamerica-northeast1.gcp.databricks.com`
	SCC relay for Private Service Connect	`projects/prod-gcp-northamerica-northeast1/regions/northamerica-northeast1/serviceAttachments/ngrok-psc-endpoint`
`southamerica-east1`	Control Plane services, including default storage and webapp	`35.198.61.240`, `34.39.157.192/28`, `34.8.0.0/28`
	SCC relay	`34.151.254.25`, `tunnel.southamerica-east1.gcp.databricks.com`
	SCC relay for Private Service Connect	`projects/prod-gcp-southamerica-east1/regions/southamerica-east1/serviceAttachments/ngrok-psc-endpoint`
`us-central1`	Control Plane services, including default storage and webapp	`34.72.196.197`, `34.128.32.16/28`, `34.8.0.0/28`
	SCC relay	`35.224.199.248`, `tunnel.us-central1.gcp.databricks.com`
	SCC relay for Private Service Connect	`projects/prod-gcp-us-central1/regions/us-central1/serviceAttachments/ngrok-psc-endpoint`
`us-east1`	Control Plane services, including default storage and webapp	`34.139.33.52`, `34.138.66.176/28`, `34.8.0.0/28`
	SCC relay	`34.138.156.37`, `tunnel.us-east1.gcp.databricks.com`
	SCC relay for Private Service Connect	`projects/prod-gcp-us-east1/regions/us-east1/serviceAttachments/ngrok-psc-endpoint`
`us-east4`	Control Plane services, including default storage and webapp	`34.86.133.227`, `34.145.222.16/28`, `34.8.0.0/28`
	SCC relay	`34.86.176.48`, `tunnel.us-east4.gcp.databricks.com`
	SCC relay for Private Service Connect	`projects/prod-gcp-us-east4/regions/us-east4/serviceAttachments/ngrok-psc-endpoint`
`us-west1`	Control Plane services, including default storage and webapp	`35.185.196.216`, `34.118.194.80/28`, `34.8.0.0/28`
	SCC relay	`34.105.33.108`, `tunnel.us-west1.gcp.databricks.com`
	SCC relay for Private Service Connect	`projects/prod-gcp-us-west1/regions/us-west1/serviceAttachments/ngrok-psc-endpoint`
`us-west4`	Control Plane services, including default storage and webapp	`34.125.26.53`, `34.16.224.32/28`, `34.8.0.0/28`
	SCC relay	`34.125.31.85`, `tunnel.us-west4.gcp.databricks.com`
	SCC relay for Private Service Connect	`projects/prod-gcp-us-west4/regions/us-west4/serviceAttachments/ngrok-psc-endpoint`

Outbound IPs from Databricks control plane

Google Cloud Region	Service	Public IP
`asia-northeast1`	Control Plane NAT	`34.146.86.3`, `34.146.146.176/28`
`asia-southeast1`	Control Plane NAT	`34.87.145.17`, `34.143.162.160/28`
`asia-south1`	Control Plane NAT	`34.93.172.236`, `34.47.163.96/28`
`australia-southeast1`	Control Plane NAT	`34.87.224.132`, `34.40.128.0/28`
`europe-west1`	Control Plane NAT	`35.187.166.222`, `34.38.159.16/28`
`europe-west2`	Control Plane NAT	`34.105.190.3`, `34.39.0.32/28`
`europe-west3`	Control Plane NAT	`35.198.69.110`, `34.89.210.112/28`
`me-central2`	Control Plane NAT	`34.166.35.42/32`, `34.166.168.240/28`
`northamerica-northeast1`	Control Plane NAT	`34.152.10.135`, `34.118.158.176/28`
`southamerica-east1`	Control Plane NAT	`34.95.225.209/32`, `34.39.157.192/28`
`us-central1`	Control Plane NAT	`34.123.97.237`, `34.128.32.16/28`
`us-east1`	Control Plane NAT	`35.196.217.150`, `34.138.66.176/28`
`us-east4`	Control Plane NAT	`35.186.178.4`, `34.145.222.16/28`
`us-west1`	Control Plane NAT	`34.82.78.230`, `34.118.194.80/28`
`us-west4`	Control Plane NAT	`34.125.175.166`, `34.16.224.32/28`

Outbound IPs for serverless compute firewall preview

Preview

This feature is in Private Preview. To try it, contact your Databricks account team.

If your workspace is enabled for serverless compute firewall (Private Preview), you receive a URL that points to a JSON file containing the outbound IP addresses. Use this information to allow or deny traffic from Databricks services.

Databricks might update outbound IPs as often as once every 30 days. Updated IPs become active as soon as 60 days after publication. After new Databricks regions become available, their active IPs are published to the file.

To find the outbound IPs for your environment, filter the JSON for entries where service is Databricks, platform is gcp, type is outbound, and region matches your workspace region. To keep these current, build automation that fetches the JSON periodically, compares the timestampSeconds field against the previously saved version to detect changes, updates your firewall allow-list with any new IPs, and saves each version of the file for reference.

warning

Databricks is decommissioning the static list of serverless outbound IPs shared through legacy versions of this preview. After May 25, 2026, workloads relying on legacy allowlists might experience connection errors.

Update your configuration by May 25, 2026 to avoid disruption to your serverless workloads.

Addresses for legacy Hive metastore

The legacy Hive metastore uses port 3306.

Google Cloud Region	Service	Public IP
`asia-northeast1`	Default metastore	`34.146.146.24`
`asia-southeast1`	Default metastore	`34.126.101.226`
`asia-south1`	Default metastore	34.93.83.239`
`australia-southeast1`	Default metastore	`34.151.73.114`
`europe-west1`	Default metastore	`34.76.244.202`
`europe-west2`	Default metastore	`35.242.155.96`
`europe-west3`	Default metastore	`34.159.152.178`
`me-central2`	Default metastore	`34.166.8.225`
`northamerica-northeast1`	Default metastore	`35.203.33.132`
`southamerica-east1`	Default metastore	`34.39.151.83`
`us-central1`	Default metastore	`35.239.64.150`
`us-east1`	Default metastore	`34.74.134.43`
`us-east4`	Default metastore	`35.245.195.96`
`us-west1`	Default metastore	`34.82.108.36`
`us-west4`	Default metastore	`34.125.124.68`

Private Service Connect (PSC) attachment URIs and project numbers

If you want to enable Google Private Service Connect (PSC) on a workspace, you might need the PSC service attachment URIs and project numbers for your workspace region, listed here.

See Enable Private Service Connect for your workspace.

asia-northeast1
- Workspace: projects/general-prod-asianortheast1-01/regions/asia-northeast1/serviceAttachments/plproxy-psc-endpoint-all-ports
- SCC relay: projects/prod-gcp-asia-northeast1/regions/asia-northeast1/serviceAttachments/ngrok-psc-endpoint
- Control plane VPC host project #: 76016113524, 758372176987
- Control plane asset project #: 323146983994
- Control plane Unity Catalog project #: 923768640139
- Audit log delivery project #: 68422481410, 85638097580, 682883591785, 693491988820, 889794603906
- System tables project #: 68598579867
- System tables Google Service Account: db-uc-storage-066pps838s-wqiyf@uc-asianeast1.iam.gserviceaccount.com
asia-south1
- Workspace: projects/gen-prod-asias1-01/regions/asia-south1/serviceAttachments/plproxy-psc-endpoint-all-ports
- SCC relay: projects/prod-gcp-asia-south1/regions/asia-south1/serviceAttachments/ngrok-psc-endpoint
- Control plane VPC host project #: 330071231143, 631686578243
- Control plane asset project #: 323146983994
- Control plane Unity Catalog project #: 570609266169
- Audit log delivery project #: 68422481410, 85638097580, 112010197761, 682883591785, 889794603906
- System tables project #: 68598579867
- System tables Google Service Account: db-uc-storage-067h53patg-btqhx@uc-asias1.iam.gserviceaccount.com
asia-southeast1
- Workspace: projects/general-prod-asiasoutheast1-01/regions/asia-southeast1/serviceAttachments/plproxy-psc-endpoint-all-ports
- SCC relay: projects/prod-gcp-asia-southeast1/regions/asia-southeast1/serviceAttachments/ngrok-psc-endpoint
- Control plane VPC host project #: 163855694937, 1034099807081
- Control plane asset project #: 323146983994
- Control plane Unity Catalog project #: 997754390120
- Audit log delivery project #: 68422481410, 85638097580, 682883591785, 693491988820, 889794603906
- System tables project #: 68598579867
- System tables Google Service Account: db-uc-storage-066ppse4ng-ghu5q@uc-asiasoutheast1.iam.gserviceaccount.com
australia-southeast1
- Workspace: projects/general-prod-ausoutheast1-01/regions/australia-southeast1/serviceAttachments/plproxy-psc-endpoint-all-ports
- SCC relay: projects/prod-gcp-australia-southeast1/regions/australia-southeast1/serviceAttachments/ngrok-psc-endpoint
- Control plane VPC host project #: 890675851652, 857749035294
- Control plane asset project #: 323146983994
- Control plane Unity Catalog project #: 1098168977388
- Audit log delivery project #: 68422481410, 85638097580, 450704425940, 682883591785, 889794603906
- System tables project #: 68598579867
- System tables Google Service Account: db-uc-storage-066ppskjuk-oh5z9@uc-ausoutheast1.iam.gserviceaccount.com
europe-west1
- Workspace: projects/general-prod-europewest1-01/regions/europe-west1/serviceAttachments/plproxy-psc-endpoint-all-ports
- SCC relay: projects/prod-gcp-europe-west1/regions/europe-west1/serviceAttachments/ngrok-psc-endpoint
- Control plane VPC host project #: 623104702041, 539637529424
- Control plane asset project #: 323146983994
- Control plane Unity Catalog project #: 837221441770
- Audit log delivery project #: 68422481410, 85638097580, 15353312707, 682883591785, 889794603906
- System tables project #: 68598579867
- System tables Google Service Account: db-uc-storage-066ppsqf0k-uej7u@uc-euwest1.iam.gserviceaccount.com
europe-west2
- Workspace: projects/general-prod-europewest2-01/regions/europe-west2/serviceAttachments/plproxy-psc-endpoint-all-ports
- SCC relay: projects/prod-gcp-europe-west2/regions/europe-west2/serviceAttachments/ngrok-psc-endpoint
- Control plane VPC host project #: 204760216014, 374166936325
- Control plane asset project #: 323146983994
- Control plane Unity Catalog project #: 751957430136
- Audit log delivery project #: 68422481410, 85638097580, 15353312707, 682883591785, 889794603906
- System tables project #: 68598579867
- System tables Google Service Account: db-uc-storage-066ppsvq4g-qufud@uc-euwest2.iam.gserviceaccount.com
europe-west3
- Workspace: projects/general-prod-europewest3-01/regions/europe-west3/serviceAttachments/plproxy-psc-endpoint-all-ports
- SCC relay: projects/prod-gcp-europe-west3/regions/europe-west3/serviceAttachments/ngrok-psc-endpoint
- Control plane VPC host project #: 622303457766, 281723498678
- Control plane asset project #: 323146983994
- Control plane Unity Catalog project #: 691428682010
- Audit log delivery project #: 68422481410, 85638097580, 15353312707, 682883591785, 889794603906
- System tables project #: 68598579867
- System tables Google Service Account: db-uc-storage-066ppt54is-keeep@uc-europewest3.iam.gserviceaccount.com
me-central2
- Workspace: projects/gen-prod-mec2-01/regions/me-central2/serviceAttachments/plproxy-psc-endpoint-all-ports
- SCC relay: projects/prod-gcp-me-central2/regions/me-central2/serviceAttachments/ngrok-psc-endpoint
- Control plane VPC host project #: 762672234140, 440105855710
- Control plane asset project #: 643670579914
- Control plane Unity Catalog project #: 624668677403
- Audit log delivery project #: 68422481410, 85638097580, 682883591785, 889794603906
- System tables project #: 68598579867
- System tables Google Service Account: db-uc-credential-06cplolmrk-3a@uc-mec2.iam.gserviceaccount.com
northamerica-northeast1
- Workspace: projects/general-prod-nanortheast1-01/regions/northamerica-northeast1/serviceAttachments/plproxy-psc-endpoint-all-ports
- SCC relay: projects/prod-gcp-na-northeast1/regions/northamerica-northeast1/serviceAttachments/ngrok-psc-endpoint
- Control plane VPC host project #: 878472879812, 67008890036
- Control plane asset project #: 323146983994
- Control plane Unity Catalog project #: 262684322583
- Audit log delivery project #: 68422481410, 85638097580, 510009392761, 682883591785, 889794603906
- System tables project #: 68598579867
- System tables Google Service Account: db-uc-storage-066ppt9s00-wp6b1@uc-nanortheast1.iam.gserviceaccount.com
southamerica-east1
- Workspace: projects/gen-prod-saeast1-01/regions/southamerica-east1/serviceAttachments/plproxy-psc-endpoint-all-ports
- SCC relay: projects/prod-gcp-southamerica-east1/regions/southamerica-east1/serviceAttachments/ngrok-psc-endpoint
- Control plane VPC host project #: 299178298712, 120952445555
- Control plane asset project #: 323146983994
- Control plane Unity Catalog project #: 974325785393
- Audit log delivery project #: 68422481410, 85638097580, 682883591785, 886671671450, 889794603906
- System tables project #: 68598579867
- System tables Google Service Account: db-uc-credential-06bmfntfis-yk@uc-saeast1.iam.gserviceaccount.com
us-central1
- Workspace: projects/gcp-prod-general/regions/us-central1/serviceAttachments/plproxy-psc-endpoint-all-ports
- SCC relay: projects/prod-gcp-us-central1/regions/us-central1/serviceAttachments/ngrok-psc-endpoint
- Control plane VPC host project #: 68422481410 and 85638097580, 52212564371
- Control plane asset project #: 323146983994
- Control plane Unity Catalog project #: 683414710976
- Audit log delivery project #: 68422481410, 85638097580, 682883591785, 889794603906
- System tables project #: 68598579867
- System tables Google Service Account: db-uc-storage-066molu6ek-znwhn@uc-uscentral1.iam.gserviceaccount.com
us-east1
- Workspace: projects/general-prod-useast1-01/regions/us-east1/serviceAttachments/plproxy-psc-endpoint-all-ports
- SCC relay: projects/prod-gcp-us-east1/regions/us-east1/serviceAttachments/ngrok-psc-endpoint
- Control plane VPC host project #: 51066298900, 126331279425
- Control plane asset project #: 323146983994
- Control plane Unity Catalog project #: 234110679923
- Audit log delivery project #: 68422481410, 85638097580, 682883591785, 889794603906
- System tables project #: 68598579867
- System tables Google Service Account: db-uc-storage-066pptsgmg-dkbon@uc-useast1.iam.gserviceaccount.com
us-east4
- Workspace: projects/general-prod-useast4-01/regions/us-east4/serviceAttachments/plproxy-psc-endpoint-all-ports
- SCC relay: projects/prod-gcp-us-east4/regions/us-east4/serviceAttachments/ngrok-psc-endpoint
- Control plane VPC host project #: 121886670913, 263270992834
- Control plane asset project #: 323146983994
- Control plane Unity Catalog project #: 522339604799
- Audit log delivery project #: 68422481410, 85638097580, 682883591785, 889794603906
- System tables project #: 68598579867
- System tables Google Service Account: db-uc-storage-066moil41c-xy2gx@uc-useast4.iam.gserviceaccount.com
us-west1
- Workspace: projects/general-prod-uswest1-01/regions/us-west1/serviceAttachments/plproxy-psc-endpoint-all-ports
- SCC relay: projects/prod-gcp-us-west1/regions/us-west1/serviceAttachments/ngrok-psc-endpoint
- Control plane VPC host project #: 646990673688, 121996733804
- Control plane asset project #: 323146983994
- Control plane Unity Catalog project #: 563665329883
- Audit log delivery project #: 68422481410, 85638097580, 682883591785, 889794603906
- System tables project #: 68598579867
- System tables Google Service Account: db-uc-storage-066ppueukg-tyrut@uc-uswest1.iam.gserviceaccount.com
us-west4
- Workspace: projects/general-prod-uswest4-01/regions/us-west4/serviceAttachments/plproxy-psc-endpoint-all-ports
- SCC relay: projects/prod-gcp-us-west4/regions/us-west4/serviceAttachments/ngrok-psc-endpoint
- Control plane VPC host project #: 321004414578, 863141203972
- Control plane asset project #: 323146983994
- Control plane Unity Catalog project #: 543816255200
- Audit log delivery project #: 68422481410, 85638097580, 682883591785, 889794603906
- System tables Google Service Account: db-uc-storage-066ppujprs-v06wt@uc-uswest4.iam.gserviceaccount.com

Reserved IP ranges for Databricks internal use

Databricks reserves certain IP ranges for internal applications to avoid potential IP conflicts. Customers should avoid using these ranges in their network configurations:

127.187.216.0/24
192.168.216.0/24
198.18.216.0/24

These reserved IP ranges apply to all types of workspaces and all cluster types, including classic and serverless clusters, as well as Databricks Container Service clusters.

Databricks Container Service clusters

For Databricks Container Service (DCS) clusters, you should also avoid using the default Docker network range:

172.17.0.0/16

By reserving these IP ranges for Databricks internal use and avoiding the default Docker network range for DCS clusters, you can help prevent potential IP conflicts and ensure the smooth operation of your Databricks environment.

Databricks control plane addresses​

Inbound IPs to Databricks control plane​

Outbound IPs from Databricks control plane​

Outbound IPs for serverless compute firewall preview​

Addresses for legacy Hive metastore​

Private Service Connect (PSC) attachment URIs and project numbers​

Reserved IP ranges for Databricks internal use​

Databricks Container Service clusters​