| title | Azure Integration Runtime IP addresses |
|---|---|
| description | Learn which IP addresses you must allow inbound traffic from, in order to properly configure firewalls for securing network access to data stores. |
| ms.author | lle |
| author | lrtoyou1223 |
| ms.subservice | integration-runtime |
| ms.topic | reference |
| ms.date | 02/13/2025 |
[!INCLUDEappliesto-adf-asa-md]
The IP addresses that Azure Integration Runtime uses depends on the region where your Azure integration runtime is located. All Azure integration runtimes that are in the same region use the same IP address ranges.
Important
The Azure integration runtime lets you used a managed virtual network. Some data flows require the use of fixed IP ranges. You can use these IP ranges for data movement, pipeline and external activity executions, as well as for filtering in data stores, network security groups (NSGs), and firewalls for inbound access from the Azure integration runtime.
Allow traffic from the IP addresses listed for the Azure Integration runtime in the specific Azure region where your resources are located. You can get an IP range list of service tags from the service tags IP range download link. For example, if the Azure region is AustraliaEast, you can get an IP range list from DataFactory.AustraliaEast.
Note
Azure Data Factory IP range is shared across Fabric Data Factory.
-
When connecting to Azure Storage account, IP network rules have no effect on requests originating from the Azure integration runtime in the same region as the storage account. For more details, please refer this article.
Instead, we suggest using trusted services while connecting to Azure Storage.