All Products
Search

This Product

    Data Transmission Service:Whitelist DTS server IP addresses

    Document Center

    Data Transmission Service:Whitelist DTS server IP addresses

    Last Updated:May 21, 2026

    When using Data Transmission Service (DTS) with a source or destination database protected by a firewall or whitelist, you must add the DTS IP address CIDR blocks to its security settings. This is often required for databases in an on-premises data center, on other cloud platforms, or for self-managed databases on ECS. This step ensures that DTS can access the database, allowing data transmission tasks to run successfully.

    When DTS connects to a database, its behavior depends on the Access Method you select:

    • Automatic addition: If the source or destination database is a supported Alibaba Cloud database, such as RDS, PolarDB, or MongoDB, and the selected Access Method is Alibaba Cloud Instance, DTS automatically adds its server IP CIDR blocks to the database whitelist.

    • Manual addition: If you connect to the database using a Public IP Address address, Express Connect, VPN Gateway, or Smart Access Gateway, or Cloud Enterprise Network (CEN), you must manually add the DTS server IP CIDR blocks to the database's security settings.

    Usage notes

    • Source of the IP list: The IP address CIDR blocks shown in the authorization pop-up window during task configuration in the console may be outdated. Always use the IP address CIDR blocks in this topic as the authoritative source.

    • IP address changes: The IP address CIDR blocks for DTS servers can change. When you first use DTS or receive a notification about a whitelist expansion, update your settings based on the information provided in the console or notification. Periodically check and update the IP addresses.

      • Cloud Enterprise Network (CEN): Update the Access Cloud Service Configuration in CEN.

      • Express Connect, VPN Gateway, or Smart Access Gateway: Update the local CIDR block in the IPsec connection.

      • On-premises database: Update the database security settings.

    • Ensuring a complete IP list: Ensure that you add all the IP address CIDR blocks for the required region. DTS may switch service nodes for disaster recovery. If the IP list is incomplete, tasks will be interrupted after a failover.

      Note

      If your database is deployed in a cluster (for example, Kafka, Redis, or Doris), ensure that you add the DTS IP whitelist to the security settings for every server in the cluster.

    • Automatically added whitelists: Do not use whitelists automatically created by DTS (which typically have names containing dts or DTS) for non-DTS services. DTS may modify these whitelists at any time, so using them for other purposes can cause service interruptions.

    • Security risks:

      • Adding the public IP address CIDR blocks of DTS servers, either automatically or manually, can introduce security risks. By using this service, you acknowledge these risks and are responsible for implementing fundamental security measures. These measures include, but are not limited to, using strong account passwords, restricting open ports for each CIDR block, using authentication for internal API calls, and periodically reviewing and removing unnecessary network rules. Alternatively, connect through a private network by using Express Connect, VPN Gateway, or Smart Access Gateway.

      • To protect your database security, remove the DTS IP address CIDR blocks from your security settings after the DTS task is completed or released.

    • Risk of route misconfiguration for the 100.104.0.0/16 network: The 100.104.0.0/16 CIDR block is an internal service network for Alibaba Cloud and is the default network that DTS uses to communicate with your database. Do not add routes to your VPC route table that direct traffic destined for 100.104.0.0/16 or its subnets to a next hop over an Express Connect, VPN Gateway, VPC Peering Connection, Cloud Enterprise Network (CEN), or other custom network tunnels. Such a configuration will interrupt the connection between DTS and your database and cause your data migration, data synchronization, and change tracking tasks to fail.

    Step 1: Confirm the access method

    Use the table below to identify your scenario and the required actions. If your access method does not require manual configuration (except in special cases) or the manual addition of DTS IP address CIDR blocks, you can skip to the next steps.

    Access method

    Scenario

    Manual configuration required

    Description

    Alibaba Cloud Instance

    Alibaba Cloud databases such as RDS, PolarDB, and MongoDB.

    No (except in special cases)

    DTS automatically adds its IP addresses to the database whitelist. Exceptions: MaxCompute, OceanBase, and cross-border or cross-region migration tasks require manual configuration.

    Self-managed Database on ECS

    A database deployed on an Alibaba Cloud ECS instance.

    No (except for clusters)

    DTS automatically adds its IP addresses to the ECS security group. Exception: If your database (such as Kafka, Redis, or Doris) is a cluster deployed on multiple ECS instances, DTS only configures the security group for the first node it connects to. You must manually add the other ECS instances in the cluster to the security group that DTS creates.

    Public IP Address

    • On-premises IDC databases

    • Databases from other cloud providers

    • Any database with a public IP address

    Yes

    You must add the IP address CIDR blocks for the DTS service in the corresponding region to your database's security settings.

    Express Connect, VPN Gateway, or Smart Access Gateway

    Databases in on-premises IDCs connected via Express Connect or VPN Gateway.

    Cloud Enterprise Network (CEN)

    Databases in on-premises IDCs connected via Cloud Enterprise Network.

    Database Gateway

    Databases connected via Database Gateway.

    Yes (configure gateway IP)

    This method does not require adding DTS IP address CIDR blocks. Instead, add the IP addresses for all Gateway node ID in Database Gateway (DG) to your database's security settings.

    Step 2: Determine the DTS server IP region

    Based on your task type and database locations, use the following table to determine which region's DTS server IP addresses to add to the correct database allowlist.

    Task type

    Database for allowlist

    DTS IP region

    Data synchronization

    Source database

    Regions of the source and destination databases

    Destination database

    Region of the destination database

    Data migration

    Source database

    Region of the destination database

    Destination database

    Region of the destination database

    Change tracking

    Source database

    Region of the source database

    Data validation (configured as a separate task)

    Source database

    Region of the destination database

    Destination database

    Region of the destination database

    Data preparation

    Source database

    Region of the destination database

    Destination database

    Region of the destination database

    For example, if you use the Public IP Address access method to migrate data from a self-managed MySQL database to an RDS for MySQL instance, you must add the public IP address CIDR blocks of DTS servers for the destination database's region to the allowlist of the source database.

    Step 3: Add IP addresses

    Automatic configuration

    Use cases

    • Alibaba Cloud Instance: Alibaba Cloud database services such as ApsaraDB RDS and PolarDB. This scenario excludes MaxCompute, OceanBase, and migration tasks that are cross-border or cross-region.

    • Self-managed Database on ECS: A single-node self-managed database.

    Configuration details

    DTS automatically configures the whitelist or security group when it establishes a connection. For more information, see Whitelists automatically added by DTS below.

    • Alibaba Cloud Instance: DTS automatically creates a product-specific whitelist group.

    • Self-managed Database on ECS: DTS automatically creates a security group named SG-DTS-GROUP-xxxx and applies it to the ECS instance.

    Click to expand: Whitelists automatically added by DTS

    When DTS connects to an Alibaba Cloud database instance (for example, when clicking Test Connectivity and Proceed in the console), it automatically adds an IP whitelist to the instance. The following table lists the supported Alibaba Cloud database instances and the corresponding whitelist names.

    Note

    • The IP whitelist automatically added by DTS is exclusively for DTS to connect to the database instance. Using this whitelist for non-DTS workloads may cause service interruptions.

    • The names of IP whitelists automatically added by DTS contain dts or DTS.

    Access method

    Database instance

    Parameter

    Alibaba Cloud Instance

    • ApsaraDB RDS for MySQL

    • ApsaraDB RDS for PostgreSQL

    • ApsaraDB RDS for MariaDB

    • ApsaraDB RDS for SQL Server

    rdsdts

    • PolarDB for MySQL

    • PolarDB for PostgreSQL

    • PolarDB for PostgreSQL (compatible with Oracle)

    dtspolardb

    AnalyticDB for MySQL 3.0

    dts_adb_v3

    AnalyticDB for PostgreSQL

    dts

    ApsaraDB for MongoDB

    ddsdts

    Tair (Redis-compatible)

    dts_group

    PolarDB-X 1.0

    drdsdts

    PolarDB-X 2.0

    polardb_x_dts

    ApsaraMQ for Kafka

    dts_kafka

    Alibaba Cloud Elasticsearch

    dts_group

    Lindorm

    ali_dts_group

    ApsaraDB for ClickHouse

    dts_clickhouse

    ApsaraDB for SelectDB

    dts_selectdb

    Self-managed Database on ECS

    ECS instance

    SG-DTS-GROUP-****

    Special cases

    • Cluster deployment: If your database (such as Kafka, Redis, or Doris) is deployed on multiple ECS instances, DTS will only automatically configure the security group for the first connected node. You must manually add the ECS instances of the remaining nodes to the DTS-created SG-DTS-GROUP-xxxx security group.

    • MaxCompute, OceanBase, and cross-border or cross-region migration tasks:

    Public IP address

    Use cases

    • Self-managed databases in on-premises data centers.

    • Databases hosted by other cloud providers.

    • Any database that exposes services over a public IP address.

    Procedure

    Important

    If the Access Method is Public IP Address, you must add the IP address CIDR blocks of the DTS servers for the regions of the source and destination databases to the security settings of the database instance.

    1. Get the IP list: In the IP address CIDR blocks of DTS servers table, get the public IP address CIDR blocks for the region determined in Step 2.

    2. Configure the firewall or whitelist: Add these CIDR blocks to the firewall of the database server or to your cloud provider's security group rules. Open only the database service port (for example, port 3306 for MySQL).

    Security recommendations

    • Principle of least privilege: Open only the required database ports to the DTS IP CIDR blocks. We recommend that you do not allow access from 0.0.0.0/0.

    • Strong authentication: Use a dedicated database account with the minimum required permissions and a strong password for DTS.

    • Encryption in transit: Whenever possible, enable and enforce SSL/TLS encrypted connections for your database.

    Express Connect, VPN Gateway, Smart Access Gateway, or Cloud Enterprise Network (CEN)

    Use cases

    This method is for on-premises data centers connected to a VPC through Alibaba Cloud Express Connect, a VPN Gateway, a Smart Access Gateway, or Cloud Enterprise Network (CEN).

    Procedure

    1. Get the IP list: In the IP address CIDR blocks of DTS servers table, get the cloud service CIDR blocks for the region determined in Step 2.

    2. Configure routes and firewalls:

      • Cloud Enterprise Network (CEN): In your CEN instance, configure the DTS private IP CIDR blocks as a cloud service.

      • Express Connect, VPN Gateway, or Smart Access Gateway: Add the DTS private IP CIDR blocks to the Local CIDR Block of your IPsec-VPN connection.

      • On-premises database: On the firewall of your on-premises data center, configure a policy to allow traffic from the DTS private IP CIDR blocks to access the database.

    Note

    After adding the IP addresses, check your database instance configuration for any settings that might restrict access from DTS. For example, check the following parameters in the configuration files of self-managed databases:

    • MySQL: bind-address.

    • PostgreSQL: listen_addresses.

    • MongoDB: bindIp.

    • Kafka: listeners and advertised.listeners.

    • Redis: bind.

    Next steps

    For security, remove the corresponding DTS IP address CIDR blocks from your database whitelist or security group after the DTS task is complete. You can delete the whitelist groups (such as rdsdts) or security groups (such as SG-DTS-GROUP-xxxx) that DTS automatically creates.

    DTS CIDR blocks

    Note

    • When an on-premises database connects to DTS through Cloud Enterprise Network (CEN) or Express Connect, VPN Gateway, or Smart Access Gateway, DTS uses server IP addresses from the internal Alibaba Cloud CIDR block 100.64.0.0/10.

    • If DTS adds new servers, you must update the whitelist of your self-managed database. Otherwise, DTS may fail to connect to the database.

    Mainland China

    China (Hangzhou)

    Region ID

    Access method

    CIDR block

    cn-hangzhou

    Express Connect, VPN Gateway, or Smart Access Gateway

    100.104.52.0/24,100.104.61.128/26,100.104.244.64/26,100.104.216.192/26,100.104.85.0/26,100.104.221.128/26,100.104.2.0/26,100.104.251.192/26,100.104.159.64/26,100.104.216.128/26,100.104.148.192/26,100.104.239.64/26,100.104.114.0/26,100.104.0.192/26,100.104.201.192/26,100.104.228.0/26,100.104.41.0/26,100.104.203.128/26,100.104.145.128/26,100.104.105.64/26,100.104.91.0/26,100.104.134.128/26,100.104.96.128/26,100.104.74.128/26,100.104.225.128/26,100.104.198.0/26

    Cloud Enterprise Network (CEN)

    Public IP Address

    110.76.0.128/26,140.205.47.0/26,110.76.2.128/26,110.75.230.192/26,110.76.8.64/26,140.205.41.192/26,203.209.225.192/26,110.75.235.128/26,110.75.230.64/26,110.75.157.192/26,110.76.9.128/26,110.75.186.0/26,203.209.247.192/26,140.205.47.128/26,110.76.9.64/26,110.75.134.192/26,140.205.196.128/26,203.119.159.192/26,106.11.73.192/26,203.209.225.128/26,110.75.130.192/26,110.76.2.64/26,140.205.41.64/26,110.75.190.0/26,110.76.11.64/26,140.205.197.0/26,203.209.247.128/26,140.205.47.64/26,110.76.9.0/26,110.75.235.0/26,110.75.186.64/26,110.76.9.192/26,106.11.76.64/26,110.75.230.0/26,140.205.196.0/26,110.76.11.128/26,110.76.11.192/26,110.76.11.0/26,59.82.47.0/26,47.102.181.128/26,59.82.46.128/26,110.76.0.0/26,110.76.0.64/26,106.11.76.0/26,47.102.234.0/26,47.102.234.64/26,59.82.46.192/26,110.75.235.64/26,110.75.130.128/26,110.75.134.128/26,110.76.8.0/26,110.75.190.64/26,110.75.143.0/26,8.139.112.64/26,8.139.112.128/26,140.205.196.64/26,8.139.99.192/26,8.139.112.0/26,140.205.47.192/26,110.75.230.128/26,110.76.0.192/26,106.11.73.128/26,140.205.196.192/26,110.75.235.192/26,47.102.181.192/26,59.82.46.64/26,110.76.2.0/26,110.76.2.192/26,112.124.239.0/26

    China (Shanghai)

    Region id

    Access method

    IP address block

    cn-shanghai

    Express Connect, VPN Gateway, or Smart Access Gateway

    100.104.205.0/24,100.104.226.128/26,100.104.149.64/26,100.104.241.128/26,100.104.177.128/26,100.104.203.192/26,100.104.113.0/26,100.104.187.0/26,100.104.17.0/26,100.104.33.192/26,100.104.3.192/26,100.104.107.0/26,100.104.29.192/26,100.104.187.192/26,100.104.177.64/26,100.104.93.128/26,100.104.174.64/26,100.104.160.0/26,100.104.147.128/26,100.104.247.192/26,100.104.225.192/26,100.104.158.128/26,100.104.35.64/26

    Cloud Enterprise Network (CEN)

    Public IP Address

    110.76.0.128/26,140.205.47.0/26,110.76.2.128/26,110.75.230.192/26,110.76.8.64/26,140.205.41.192/26,203.209.225.192/26,110.75.235.128/26,110.75.230.64/26,110.75.157.192/26,110.76.9.128/26,110.75.186.0/26,203.209.247.192/26,140.205.47.128/26,110.76.9.64/26,110.75.134.192/26,140.205.196.128/26,203.119.159.192/26,106.11.73.192/26,203.209.225.128/26,110.75.130.192/26,110.76.2.64/26,140.205.41.64/26,110.75.190.0/26,110.76.11.64/26,140.205.197.0/26,203.209.247.128/26,140.205.47.64/26,110.76.9.0/26,110.75.235.0/26,110.75.186.64/26,110.76.9.192/26,106.11.76.64/26,110.75.230.0/26,140.205.196.0/26,110.76.11.128/26,110.76.11.192/26,110.76.11.0/26,59.82.47.0/26,47.102.181.128/26,59.82.46.128/26,110.76.0.0/26,110.76.0.64/26,106.11.76.0/26,47.102.234.0/26,47.102.234.64/26,59.82.46.192/26,110.75.235.64/26,110.75.130.128/26,110.75.134.128/26,110.76.8.0/26,110.75.190.64/26,110.75.143.0/26,8.139.112.64/26,8.139.112.128/26,140.205.196.64/26,8.139.99.192/26,8.139.112.0/26,140.205.47.192/26,110.75.230.128/26,110.76.0.192/26,106.11.73.128/26,140.205.196.192/26,110.75.235.192/26,47.102.181.192/26,59.82.46.64/26,110.76.2.0/26,110.76.2.192/26,59.82.32.64/26,117.185.224.192/26,59.82.32.192/26,106.11.224.64/26,112.65.93.64/26,59.82.32.128/26,106.11.224.192/26,59.82.32.0/26,117.185.224.64/26,47.103.166.192/26,8.128.64.64/26,47.101.109.64/26,47.101.109.192/26,8.128.66.128/26,8.128.64.128/26,117.185.224.0/26,47.103.170.0/26,106.11.224.0/26,8.128.64.0/26,8.128.64.192/26,8.128.66.192/26,101.91.141.64/26,101.91.141.128/26,47.101.109.0/26,106.11.224.128/26,112.65.93.0/26,8.128.66.64/26,47.103.166.128/26,112.65.93.128/26,101.91.141.0/26,47.101.109.128/26,47.103.166.64/26,140.206.221.64/26,8.128.66.0/26,117.185.224.128/26,101.91.139.192/26,101.133.205.192/26

    China (Qingdao)

    Region ID

    Access method

    CIDR block

    cn-qingdao

    Express Connect, VPN Gateway, or Smart Access Gateway

    100.104.72.0/24,100.104.35.192/26,100.104.12.0/26,100.104.111.0/26,100.104.100.128/26,100.104.136.192/26,100.104.16.64/26,100.104.78.128/26

    Cloud Enterprise Network (CEN)

    Public IP Address

    203.119.185.0/24,140.205.47.0/24,110.76.8.64/26,203.119.146.128/26,203.209.225.192/26,140.205.41.192/26,110.75.157.192/26,203.119.147.0/24,110.75.186.0/26,203.209.247.192/26,203.119.240.0/26,203.119.182.192/26,110.75.134.192/26,203.119.159.192/26,106.11.73.192/26,203.209.225.128/26,203.119.184.0/24,110.75.130.192/26,203.119.191.64/26,140.205.41.64/26,110.75.190.0/26,8.149.144.0/24,140.205.197.0/26,203.209.247.128/26,203.119.187.0/24,110.75.235.0/24,110.75.186.64/26,118.190.207.25,110.76.9.0/24,106.11.76.64/26,203.119.146.192/26,115.28.200.55,110.75.230.0/24,203.119.188.0/24,140.205.196.0/24,59.82.47.0/26,47.102.181.128/26,203.119.149.0/24,59.82.46.128/26,203.119.191.128/26,110.76.0.0/24,106.11.185.0/24,106.11.76.0/26,115.28.216.250,203.119.151.0/24,47.102.234.0/26,203.119.190.0/24,47.102.234.64/26,59.82.46.192/26,110.75.130.128/26,110.75.134.128/26,203.119.150.0/24,110.76.8.0/26,120.27.53.203,110.75.190.64/26,110.75.143.0/26,110.76.2.0/24,8.139.112.64/26,106.11.40.64/26,8.139.112.128/26,203.119.189.0/24,118.190.207.194,8.139.99.192/26,203.119.186.0/24,8.139.112.0/26,106.11.184.0/24,120.27.72.0/24,203.119.183.0/24,106.11.73.128/26,203.119.191.0/26,110.76.11.0/24,59.82.46.64/26,47.102.181.192/26,39.98.96.0/24,203.119.148.0/24,110.76.0.128/26,140.205.47.0/26,110.76.2.128/26,110.75.230.192/26,110.75.235.128/26,110.75.230.64/26,110.76.9.128/26,140.205.47.128/26,110.76.9.64/26,140.205.196.128/26,110.76.2.64/26,110.76.11.64/26,140.205.47.64/26,110.76.9.0/26,110.75.235.0/26,110.76.9.192/26,110.75.230.0/26,140.205.196.0/26,110.76.11.128/26,110.76.11.192/26,110.76.11.0/26,110.76.0.0/26,110.76.0.64/26,110.75.235.64/26,140.205.196.64/26,140.205.47.192/26,110.75.230.128/26,110.76.0.192/26,140.205.196.192/26,110.75.235.192/26,110.76.2.0/26,110.76.2.192/26,120.27.72.192/26,120.27.72.128/26,120.27.72.0/26,120.27.72.64/26

    China (Beijing)

    Region id

    Access method

    IP address range

    cn-beijing

    Express Connect, VPN Gateway, or Smart Access Gateway

    100.104.11.64/26,100.104.128.192/26,100.104.143.0/26,100.104.183.0/24,100.104.200.64/26,100.104.201.0/26,100.104.213.64/26,100.104.227.192/26,100.104.232.128/26,100.104.236.128/26,100.104.247.64/26,100.104.84.128/26,100.104.237.64/26,100.104.6.0/26,100.104.9.128/26,100.104.230.64/26,100.104.157.64/26,100.104.104.64/26,100.104.218.64/26,100.104.59.0/26,100.104.93.64/26,100.104.79.0/26,100.104.235.128/26,100.104.17.128/26,100.104.141.64/26,100.104.251.0/26,100.104.200.128/26,100.104.9.0/26

    Cloud Enterprise Network (CEN)

    Public IP Address

    110.76.0.128/26,140.205.47.0/26,110.76.2.128/26,110.75.230.192/26,110.76.8.64/26,140.205.41.192/26,203.209.225.192/26,110.75.235.128/26,110.75.230.64/26,110.75.157.192/26,110.76.9.128/26,110.75.186.0/26,203.209.247.192/26,140.205.47.128/26,110.76.9.64/26,110.75.134.192/26,140.205.196.128/26,203.119.159.192/26,106.11.73.192/26,203.209.225.128/26,110.75.130.192/26,110.76.2.64/26,140.205.41.64/26,110.75.190.0/26,110.76.11.64/26,140.205.197.0/26,203.209.247.128/26,140.205.47.64/26,110.76.9.0/26,110.75.235.0/26,110.75.186.64/26,110.76.9.192/26,106.11.76.64/26,110.75.230.0/26,140.205.196.0/26,110.76.11.128/26,110.76.11.192/26,110.76.11.0/26,59.82.47.0/26,47.102.181.128/26,59.82.46.128/26,110.76.0.0/26,110.76.0.64/26,106.11.76.0/26,47.102.234.0/26,47.102.234.64/26,59.82.46.192/26,110.75.235.64/26,110.75.130.128/26,110.75.134.128/26,110.76.8.0/26,110.75.190.64/26,110.75.143.0/26,8.139.112.64/26,8.139.112.128/26,140.205.196.64/26,8.139.99.192/26,8.139.112.0/26,140.205.47.192/26,110.75.230.128/26,110.76.0.192/26,106.11.73.128/26,140.205.196.192/26,110.75.235.192/26,47.102.181.192/26,59.82.46.64/26,110.76.2.0/26,110.76.2.192/26,39.156.175.0/26,112.126.111.128/26,39.107.7.64/26,39.107.7.0/26,182.92.137.64/26,49.7.153.192/26,49.7.152.192/26,182.92.137.128/26,49.7.152.0/26,112.126.112.0/26,39.107.223.192/26,49.7.152.64/26,114.250.62.192/26,111.206.225.128/26,114.250.54.64/26,49.7.152.128/26,112.126.112.64/26,49.7.153.128/26,111.13.119.192/26,111.206.225.64/26,39.107.223.128/26,114.250.54.0/26,114.250.62.128/26,182.92.17.192/26,114.250.62.0/26,111.13.22.64/26,111.13.246.192/26,49.7.153.0/26,182.92.32.192/26,39.156.175.128/26,182.92.137.0/26,49.7.153.64/26,39.107.223.0/26,39.156.175.64/26,182.92.17.128/26,101.200.20.0/26,182.92.137.192/26,112.126.111.192/26,39.156.175.192/26,114.250.62.64/26,111.13.119.128/26,39.107.223.64/26,182.92.32.128/26,101.200.116.192/26,47.95.35.136/32,39.102.181.128/26,8.131.132.0/26

    China (Zhangjiakou)

    Region ID

    Access method

    CIDR block

    cn-zhangjiakou

    Express Connect, VPN Gateway, or Smart Access Gateway

    100.104.144.128/26,100.104.175.0/24,100.104.180.192/26,100.104.249.0/26,100.104.32.64/26,100.104.52.0/26,100.104.84.128/26,100.104.133.128/26,100.104.211.192/26,100.104.196.192/26,100.104.13.128/26,100.104.75.64/26,100.104.174.192/26,100.104.195.64/26,100.104.106.128/26,100.104.76.64/26,100.104.18.128/26,100.104.237.128/26

    Cloud Enterprise Network (CEN)

    Public IP Address

    110.76.0.128/26,140.205.47.0/26,110.76.2.128/26,110.75.230.192/26,110.76.8.64/26,140.205.41.192/26,203.209.225.192/26,110.75.235.128/26,110.75.230.64/26,110.75.157.192/26,110.76.9.128/26,110.75.186.0/26,203.209.247.192/26,140.205.47.128/26,110.76.9.64/26,110.75.134.192/26,140.205.196.128/26,203.119.159.192/26,106.11.73.192/26,203.209.225.128/26,110.75.130.192/26,110.76.2.64/26,140.205.41.64/26,110.75.190.0/26,110.76.11.64/26,140.205.197.0/26,203.209.247.128/26,140.205.47.64/26,110.76.9.0/26,110.75.235.0/26,110.75.186.64/26,110.76.9.192/26,106.11.76.64/26,110.75.230.0/26,140.205.196.0/26,110.76.11.128/26,110.76.11.192/26,110.76.11.0/26,59.82.47.0/26,47.102.181.128/26,59.82.46.128/26,110.76.0.0/26,110.76.0.64/26,106.11.76.0/26,47.102.234.0/26,47.102.234.64/26,59.82.46.192/26,110.75.235.64/26,110.75.130.128/26,110.75.134.128/26,110.76.8.0/26,110.75.190.64/26,110.75.143.0/26,8.139.112.64/26,8.139.112.128/26,140.205.196.64/26,8.139.99.192/26,8.139.112.0/26,140.205.47.192/26,110.75.230.128/26,110.76.0.192/26,106.11.73.128/26,140.205.196.192/26,110.75.235.192/26,47.102.181.192/26,59.82.46.64/26,110.76.2.0/26,110.76.2.192/26,39.101.252.128/26

    China (Hohhot)

    Region id

    Access method

    IP address block

    cn-huhehaote

    Express Connect, VPN Gateway, or Smart Access Gateway

    100.104.72.0/24,100.104.145.64/26,100.104.132.64/26,100.104.177.192/26,100.104.12.0/26,100.104.37.128/26,100.104.218.128/26,100.104.250.0/26,100.104.122.128/26,100.104.158.192/26

    Cloud Enterprise Network (CEN)

    Public IP Address

    39.102.199.64/26,39.104.72.87,39.104.78.173,39.104.62.152,39.99.77.64/26,39.102.199.128/26,39.104.199.192/26,39.104.79.122,39.102.224.0/26,39.99.77.0/26,39.104.220.0/24,39.104.86.0,39.102.199.192/26,39.99.77.128/26

    China (Ulanqab)

    Region ID

    Access method

    IP address block

    cn-wulanchabu

    Express Connect, VPN Gateway, or Smart Access Gateway

    100.104.182.128/26,100.104.100.128/26,100.104.136.192/26,100.104.16.64/26,100.104.78.128/26,100.104.205.192/26,100.104.152.128/26,100.104.199.192/26,100.104.120.0/26,100.104.37.64/26

    Cloud Enterprise Network (CEN)

    Public IP Address

    140.205.47.0/24,8.130.69.168,110.76.8.64/26,203.209.225.192/26,140.205.41.192/26,39.101.5.0/26,110.75.157.192/26,110.75.186.0/26,203.209.247.192/26,110.75.134.192/26,8.130.69.173,39.101.0.192/26,203.119.159.192/26,106.11.73.192/26,203.209.225.128/26,110.75.130.192/26,140.205.41.64/26,110.75.190.0/26,8.149.144.0/24,140.205.197.0/26,203.209.247.128/26,110.75.235.0/24,110.75.186.64/26,110.76.9.0/24,106.11.76.64/26,110.75.230.0/24,59.82.126.0/24,8.130.121.252,39.101.7.0/24,140.205.196.0/24,59.82.47.0/26,47.102.181.128/26,59.82.46.128/26,110.76.0.0/24,106.11.76.0/26,47.102.234.0/26,47.102.234.64/26,59.82.46.192/26,110.75.130.128/26,110.75.134.128/26,110.76.8.0/26,110.75.190.64/26,121.89.103.128/26,110.75.143.0/26,110.76.2.0/24,8.139.112.64/26,8.139.112.128/26,8.139.99.192/26,121.89.103.192/26,8.139.112.0/26,39.101.0.64/26,39.101.0.128/26,121.89.103.64/26,106.11.73.128/26,121.89.104.0/26,110.76.11.0/24,59.82.46.64/26,47.102.181.192/26,8.130.48.34,8.130.122.110,110.76.0.128/26,140.205.47.0/26,110.76.2.128/26,110.75.230.192/26,110.75.235.128/26,110.75.230.64/26,110.76.9.128/26,140.205.47.128/26,110.76.9.64/26,140.205.196.128/26,110.76.2.64/26,110.76.11.64/26,140.205.47.64/26,110.76.9.0/26,110.75.235.0/26,110.76.9.192/26,110.75.230.0/26,140.205.196.0/26,110.76.11.128/26,110.76.11.192/26,110.76.11.0/26,110.76.0.0/26,110.76.0.64/26,110.75.235.64/26,140.205.196.64/26,140.205.47.192/26,110.75.230.128/26,110.76.0.192/26,140.205.196.192/26,110.75.235.192/26,110.76.2.0/26,110.76.2.192/26

    China (Shenzhen)

    Region ID

    Access method

    CIDR block

    cn-shenzhen

    Express Connect, VPN Gateway, or Smart Access Gateway

    100.104.75.64/26,100.104.235.192/26,100.104.205.0/24,100.104.41.64/26,100.104.171.128/26,100.104.161.192/26,100.104.172.192/26,100.104.168.0/26,100.104.160.128/26,100.104.179.128/26,100.104.98.192/26,100.104.168.128/26,100.104.247.64/26,100.104.17.64/26,100.104.87.0/26,100.104.105.128/26,100.104.114.192/26,100.104.213.64/26

    Cloud Enterprise Network (CEN)

    Public IP Address

    110.76.0.128/26,140.205.47.0/26,110.76.2.128/26,110.75.230.192/26,110.76.8.64/26,140.205.41.192/26,203.209.225.192/26,110.75.235.128/26,110.75.230.64/26,110.75.157.192/26,110.76.9.128/26,110.75.186.0/26,203.209.247.192/26,140.205.47.128/26,110.76.9.64/26,110.75.134.192/26,140.205.196.128/26,203.119.159.192/26,106.11.73.192/26,203.209.225.128/26,110.75.130.192/26,110.76.2.64/26,140.205.41.64/26,110.75.190.0/26,110.76.11.64/26,140.205.197.0/26,203.209.247.128/26,140.205.47.64/26,110.76.9.0/26,110.75.235.0/26,110.75.186.64/26,110.76.9.192/26,106.11.76.64/26,110.75.230.0/26,140.205.196.0/26,110.76.11.128/26,110.76.11.192/26,110.76.11.0/26,59.82.47.0/26,47.102.181.128/26,59.82.46.128/26,110.76.0.0/26,110.76.0.64/26,106.11.76.0/26,47.102.234.0/26,47.102.234.64/26,59.82.46.192/26,110.75.235.64/26,110.75.130.128/26,110.75.134.128/26,110.76.8.0/26,110.75.190.64/26,110.75.143.0/26,8.139.112.64/26,8.139.112.128/26,140.205.196.64/26,8.139.99.192/26,8.139.112.0/26,140.205.47.192/26,110.75.230.128/26,110.76.0.192/26,106.11.73.128/26,140.205.196.192/26,110.75.235.192/26,47.102.181.192/26,59.82.46.64/26,110.76.2.0/26,110.76.2.192/26,120.24.136.0/26,119.23.166.64/26,8.129.151.192/26,47.121.45.0/26,47.112.83.192/26,47.106.63.192/26,47.112.84.64/26,8.129.151.0/26,47.112.84.0/26,47.106.63.0/26,8.129.151.128/26,47.106.63.64/26,47.112.84.128/26,47.120.229.128/26,8.129.151.64/26,47.106.63.128/26,47.113.76.192/26

    China (Heyuan)

    Region ID

    Connection method

    IP address block

    cn-heyuan

    Express Connect, VPN Gateway, or Smart Access Gateway

    100.104.147.192/26,100.104.76.192/26,100.104.246.192/26,100.104.106.192/26,100.104.210.128/26,100.104.48.128/26

    Cloud Enterprise Network (CEN)

    Public IP Address

    110.76.0.128/26,140.205.47.0/26,110.76.2.128/26,110.75.230.192/26,110.76.8.64/26,140.205.41.192/26,203.209.225.192/26,110.75.235.128/26,110.75.230.64/26,110.75.157.192/26,110.76.9.128/26,110.75.186.0/26,203.209.247.192/26,140.205.47.128/26,110.76.9.64/26,110.75.134.192/26,140.205.196.128/26,203.119.159.192/26,106.11.73.192/26,203.209.225.128/26,110.75.130.192/26,110.76.2.64/26,140.205.41.64/26,110.75.190.0/26,110.76.11.64/26,140.205.197.0/26,203.209.247.128/26,140.205.47.64/26,110.76.9.0/26,110.75.235.0/26,110.75.186.64/26,110.76.9.192/26,106.11.76.64/26,110.75.230.0/26,140.205.196.0/26,110.76.11.128/26,110.76.11.192/26,110.76.11.0/26,59.82.47.0/26,47.102.181.128/26,59.82.46.128/26,110.76.0.0/26,110.76.0.64/26,106.11.76.0/26,47.102.234.0/26,47.102.234.64/26,59.82.46.192/26,110.75.235.64/26,110.75.130.128/26,110.75.134.128/26,110.76.8.0/26,110.75.190.64/26,110.75.143.0/26,8.139.112.64/26,8.139.112.128/26,140.205.196.64/26,8.139.99.192/26,8.139.112.0/26,140.205.47.192/26,110.75.230.128/26,110.76.0.192/26,106.11.73.128/26,140.205.196.192/26,110.75.235.192/26,47.102.181.192/26,59.82.46.64/26,110.76.2.0/26,110.76.2.192/26,47.113.157.64/26,47.113.157.192/26,47.113.157.128/26,47.113.158.0/26

    China (Guangzhou)

    Region ID

    Access method

    CIDR block

    cn-guangzhou

    Express Connect, VPN Gateway, or Smart Access Gateway

    100.104.132.64/26,100.104.240.128/26,100.104.122.128/26,100.104.233.0/26,100.104.166.64/26,100.104.100.128/26,100.104.136.192/26,100.104.16.64/26,100.104.11.64/26

    Cloud Enterprise Network (CEN)

    Public IP Address

    110.76.0.128/26,140.205.47.0/26,110.76.2.128/26,110.75.230.192/26,110.76.8.64/26,140.205.41.192/26,203.209.225.192/26,110.75.235.128/26,110.75.230.64/26,110.75.157.192/26,110.76.9.128/26,110.75.186.0/26,203.209.247.192/26,140.205.47.128/26,110.76.9.64/26,110.75.134.192/26,140.205.196.128/26,203.119.159.192/26,106.11.73.192/26,203.209.225.128/26,110.75.130.192/26,110.76.2.64/26,140.205.41.64/26,110.75.190.0/26,110.76.11.64/26,140.205.197.0/26,203.209.247.128/26,140.205.47.64/26,110.76.9.0/26,110.75.235.0/26,110.75.186.64/26,110.76.9.192/26,106.11.76.64/26,110.75.230.0/26,140.205.196.0/26,110.76.11.128/26,110.76.11.192/26,110.76.11.0/26,59.82.47.0/26,47.102.181.128/26,59.82.46.128/26,110.76.0.0/26,110.76.0.64/26,106.11.76.0/26,47.102.234.0/26,47.102.234.64/26,59.82.46.192/26,110.75.235.64/26,110.75.130.128/26,110.75.134.128/26,110.76.8.0/26,110.75.190.64/26,110.75.143.0/26,8.139.112.64/26,8.139.112.128/26,140.205.196.64/26,8.139.99.192/26,8.139.112.0/26,140.205.47.192/26,110.75.230.128/26,110.76.0.192/26,106.11.73.128/26,140.205.196.192/26,110.75.235.192/26,47.102.181.192/26,59.82.46.64/26,110.76.2.0/26,110.76.2.192/26,8.134.0.64/26,8.134.0.128/26,8.134.0.192/26,8.134.5.0/26,8.134.79.141/32,8.134.79.143/32

    China (Wuhan)

    Region ID

    Access method

    IP address block

    cn-wuhan-lr

    Express Connect, VPN Gateway, or Smart Access Gateway

    100.104.182.128/26,100.104.127.0/26,100.104.48.128/26,100.104.69.0/26,100.104.87.192/26,100.104.145.64/26

    Cloud Enterprise Network (CEN)

    Public IP Address

    110.76.0.128/26,140.205.47.0/26,110.76.2.128/26,110.75.230.192/26,110.76.8.64/26,140.205.41.192/26,203.209.225.192/26,110.75.235.128/26,110.75.230.64/26,110.75.157.192/26,110.76.9.128/26,110.75.186.0/26,203.209.247.192/26,140.205.47.128/26,110.76.9.64/26,110.75.134.192/26,140.205.196.128/26,203.119.159.192/26,106.11.73.192/26,203.209.225.128/26,110.75.130.192/26,110.76.2.64/26,140.205.41.64/26,110.75.190.0/26,110.76.11.64/26,140.205.197.0/26,203.209.247.128/26,140.205.47.64/26,110.76.9.0/26,110.75.235.0/26,110.75.186.64/26,110.76.9.192/26,106.11.76.64/26,110.75.230.0/26,140.205.196.0/26,110.76.11.128/26,110.76.11.192/26,110.76.11.0/26,59.82.47.0/26,47.102.181.128/26,59.82.46.128/26,110.76.0.0/26,110.76.0.64/26,106.11.76.0/26,47.102.234.0/26,47.102.234.64/26,59.82.46.192/26,110.75.235.64/26,110.75.130.128/26,110.75.134.128/26,110.76.8.0/26,110.75.190.64/26,110.75.143.0/26,8.139.112.64/26,8.139.112.128/26,140.205.196.64/26,8.139.99.192/26,8.139.112.0/26,140.205.47.192/26,110.75.230.128/26,110.76.0.192/26,106.11.73.128/26,140.205.196.192/26,110.75.235.192/26,47.102.181.192/26,59.82.46.64/26,110.76.2.0/26,110.76.2.192/26,8.148.11.160/32,8.148.12.15/32,8.148.11.99/32,8.148.10.43/32,8.148.10.61/32

    China (Chengdu)

    Region ID

    Access method

    IP address block

    cn-chengdu

    Express Connect, VPN Gateway, or Smart Access Gateway

    100.104.76.192/26,100.104.145.64/26,100.104.235.192/26,100.104.127.0/26,100.104.166.64/26,100.104.100.128/26,100.104.136.192/26,100.104.16.64/26,100.104.149.128/26,100.104.177.0/26,100.104.120.192/26

    Cloud Enterprise Network (CEN)

    Public IP Address

    110.76.0.128/26,140.205.47.0/26,110.76.2.128/26,110.75.230.192/26,110.76.8.64/26,140.205.41.192/26,203.209.225.192/26,110.75.235.128/26,110.75.230.64/26,110.75.157.192/26,110.76.9.128/26,110.75.186.0/26,203.209.247.192/26,140.205.47.128/26,110.76.9.64/26,110.75.134.192/26,140.205.196.128/26,203.119.159.192/26,106.11.73.192/26,203.209.225.128/26,110.75.130.192/26,110.76.2.64/26,140.205.41.64/26,110.75.190.0/26,110.76.11.64/26,140.205.197.0/26,203.209.247.128/26,140.205.47.64/26,110.76.9.0/26,110.75.235.0/26,110.75.186.64/26,110.76.9.192/26,106.11.76.64/26,110.75.230.0/26,140.205.196.0/26,110.76.11.128/26,110.76.11.192/26,110.76.11.0/26,59.82.47.0/26,47.102.181.128/26,59.82.46.128/26,110.76.0.0/26,110.76.0.64/26,106.11.76.0/26,47.102.234.0/26,47.102.234.64/26,59.82.46.192/26,110.75.235.64/26,110.75.130.128/26,110.75.134.128/26,110.76.8.0/26,110.75.190.64/26,110.75.143.0/26,8.139.112.64/26,8.139.112.128/26,140.205.196.64/26,8.139.99.192/26,8.139.112.0/26,140.205.47.192/26,110.75.230.128/26,110.76.0.192/26,106.11.73.128/26,140.205.196.192/26,110.75.235.192/26,47.102.181.192/26,59.82.46.64/26,110.76.2.0/26,110.76.2.192/26,47.108.45.192/26,8.137.26.64/26,47.108.47.0/26,8.137.29.0/26,47.108.47.64/26,8.137.26.128/26,47.108.45.128/26,8.137.26.192/26,47.109.5.0/26,8.128.98.128/26,8.128.97.192/26,8.128.97.128/26,8.128.97.64/26,47.108.32.128/26,8.128.98.64/26,47.108.32.0/26,8.128.98.192/26,8.128.98.0/26,47.108.32.192/26,8.128.97.0/26,47.108.33.0/26

    Other regions

    China (Hong Kong)

    Region ID

    Access method

    IP address block

    cn-hongkong

    Express Connect, VPN Gateway, or Smart Access Gateway

    100.104.233.0/24,100.104.177.192/26,100.104.158.192/26,100.104.180.192/26,100.104.120.0/26,100.104.2.64/26,100.104.242.64/26,100.104.187.64/26,100.104.169.0/26,100.104.37.0/26,100.104.6.128/26,100.104.142.192/26,100.104.144.128/26

    Cloud Enterprise Network (CEN)

    Public IP Address

    140.205.47.0/24,110.76.8.64/26,47.240.180.192/26,203.209.225.192/26,140.205.41.192/26,110.75.157.192/26,110.75.186.0/26,203.209.247.192/26,110.75.134.192/26,203.119.159.192/26,106.11.73.192/26,203.209.225.128/26,47.240.211.0/26,110.75.130.192/26,140.205.41.64/26,110.75.190.0/26,8.149.144.0/24,47.90.37.175,140.205.197.0/26,203.209.247.128/26,110.75.235.0/24,110.75.186.64/26,110.76.9.0/24,106.11.76.64/26,110.75.230.0/24,47.240.210.192/26,140.205.196.0/24,59.82.47.0/26,47.243.0.32/28,47.102.181.128/26,59.82.46.128/26,110.76.0.0/24,106.11.76.0/26,47.89.39.119,47.102.234.0/26,47.90.38.29,47.102.234.64/26,59.82.46.192/26,110.75.130.128/26,110.75.134.128/26,110.76.8.0/26,110.75.190.64/26,110.75.143.0/26,110.76.2.0/24,8.139.112.64/26,8.139.112.128/26,47.240.195.0/26,8.139.99.192/26,8.139.112.0/26,47.240.195.128/26,106.11.73.128/26,110.76.11.0/24,59.82.46.64/26,47.102.181.192/26,47.90.24.64/26,47.240.195.64/26,47.240.210.64/26,47.240.210.128/26,110.76.0.128/26,140.205.47.0/26,110.76.2.128/26,110.75.230.192/26,110.75.235.128/26,110.75.230.64/26,110.76.9.128/26,140.205.47.128/26,110.76.9.64/26,140.205.196.128/26,110.76.2.64/26,110.76.11.64/26,140.205.47.64/26,110.76.9.0/26,110.75.235.0/26,110.76.9.192/26,110.75.230.0/26,140.205.196.0/26,110.76.11.128/26,110.76.11.192/26,110.76.11.0/26,110.76.0.0/26,110.76.0.64/26,110.75.235.64/26,140.205.196.64/26,140.205.47.192/26,110.75.230.128/26,110.76.0.192/26,140.205.196.192/26,110.75.235.192/26,110.76.2.0/26,110.76.2.192/26

    Singapore

    Region ID

    Access method

    CIDR block

    ap-southeast-1

    Express Connect, VPN Gateway, or Smart Access Gateway

    100.104.188.0/24,100.104.207.128/26,100.104.12.0/26,100.104.179.64/26,100.104.41.64/26,100.104.59.64/26,100.104.91.64/26,100.104.111.64/26,100.104.44.0/26,100.104.238.64/26

    Cloud Enterprise Network (CEN)

    Public IP Address

    161.117.146.192/26,161.117.164.64/26,161.117.164.0/26,161.117.172.0/28,161.117.146.128/26,47.102.181.128/26,47.102.181.192/26,47.102.234.64/26,47.102.234.0/26,8.139.112.64/26,8.139.112.0/26,8.139.112.128/26,8.139.99.192/26,47.89.72.128/26,47.89.73.128/26,47.89.73.192/26,47.89.75.192/26,47.89.88.64/26,47.89.90.64/26,47.246.74.192/26,47.246.107.0/26,47.89.88.0/26,47.89.90.0/26,47.246.108.64/26,47.246.164.64/26,47.89.88.128/26,47.246.73.64/26,47.246.74.0/26,47.246.175.192/26,110.76.0.128/26,47.88.233.192/26,140.205.47.0/26,110.76.2.128/26,110.75.230.192/26,110.76.8.64/26,140.205.41.192/26,203.209.225.192/26,110.75.235.128/26,47.88.233.128/26,110.75.230.64/26,110.75.157.192/26,110.76.9.128/26,110.75.186.0/26,203.209.247.192/26,47.74.206.0/26,140.205.47.128/26,110.76.9.64/26,110.75.134.192/26,47.88.233.0/26,140.205.196.128/26,203.119.159.192/26,106.11.73.192/26,203.209.225.128/26,110.75.130.192/26,110.76.2.64/26,140.205.41.64/26,110.75.190.0/26,110.76.11.64/26,140.205.197.0/26,47.74.206.192/26,203.209.247.128/26,140.205.47.64/26,110.76.9.0/26,110.75.235.0/26,110.75.186.64/26,110.76.9.192/26,106.11.76.64/26,110.75.230.0/26,140.205.196.0/26,110.76.11.128/26,110.76.11.192/26,110.76.11.0/26,59.82.47.0/26,59.82.46.128/26,110.76.0.0/26,110.76.0.64/26,106.11.76.0/26,59.82.46.192/26,110.75.235.64/26,110.75.130.128/26,110.75.134.128/26,110.76.8.0/26,110.75.190.64/26,110.75.143.0/26,140.205.196.64/26,47.74.206.128/26,140.205.47.192/26,110.75.230.128/26,47.74.206.64/26,110.76.0.192/26,106.11.73.128/26,47.88.233.64/26,140.205.196.192/26,110.75.235.192/26,59.82.46.64/26,110.76.2.0/26,110.76.2.192/26

    Malaysia (Kuala Lumpur)

    Region ID

    Access method

    IP address block

    ap-southeast-3

    Express Connect, VPN Gateway, or Smart Access Gateway

    100.104.5.0/24,100.104.36.0/26,100.104.234.192/26,100.104.76.192/26,100.104.69.0/26,100.104.87.192/26,100.104.158.192/26,100.104.250.0/26,100.104.62.64/26

    Cloud Enterprise Network (CEN)

    Public IP Address

    47.250.30.0/24,47.250.34.128/28,47.250.29.0/24,47.87.205.0/26,47.250.30.128/26,47.250.30.0/26,47.250.30.64/26,47.250.29.64/26,47.87.205.192/26,47.87.205.128/26,47.250.30.192/26,47.250.29.192/26,47.250.29.0/26,47.87.205.64/26,47.250.29.128/26,47.87.206.192/26,47.87.206.64/26,47.87.206.128/26,47.87.206.0/26

    Indonesia (Jakarta)

    Region ID

    Access method

    IP addresses

    ap-southeast-5

    Express Connect, VPN Gateway, or Smart Access Gateway

    100.104.175.0/24,100.104.35.192/26,100.104.235.192/26,100.104.12.0/26,100.104.111.0/26,100.104.158.192/26,100.104.37.128/26,100.104.218.128/26

    Cloud Enterprise Network (CEN)

    Public IP Address

    8.215.147.0/28,147.139.132.101,149.129.230.192/26,147.139.156.64/26,147.139.165.206,147.139.133.46,147.139.179.168,147.139.156.0/26,147.139.156.128/26

    Philippines (Manila)

    Region id

    Access method

    CIDR block

    ap-southeast-6

    Express Connect, VPN Gateway, or Smart Access Gateway

    100.104.153.64/26,100.104.76.192/26,100.104.246.192/26,100.104.158.192/26,100.104.37.128/26,100.104.218.128/26,100.104.250.0/26,100.104.199.192/26

    Cloud Enterprise Network (CEN)

    Public IP Address

    8.212.137.0/26,8.212.136.192/26,8.212.136.128/26,8.212.136.64/26

    Thailand (Bangkok)

    Region ID

    Access method

    CIDR block

    ap-southeast-7

    Express Connect, VPN Gateway, or Smart Access Gateway

    100.104.150.192/26,100.104.75.64/26,100.104.132.64/26,100.104.177.192/26,100.104.12.0/26,100.104.180.192/26

    Cloud Enterprise Network (CEN)

    Public IP Address

    8.213.163.0/26,8.213.162.64/26,8.213.162.128/26,8.213.162.192/26,47.81.23.64/26,47.81.23.128/25

    Japan (Tokyo)

    Region ID

    Access method

    CIDR block

    ap-northeast-1

    Express Connect, VPN Gateway, or Smart Access Gateway

    100.104.112.0/24,100.104.117.192/26,100.104.12.0/26,100.104.166.64/26,100.104.179.64/26,100.104.108.128/26,100.104.100.128/26,100.104.136.192/26

    Cloud Enterprise Network (CEN)

    Public IP Address

    47.91.0.128/26,47.245.51.0/24,47.245.18.192/26,47.245.18.128/26,47.91.0.192/26,8.209.192.160/28,47.245.51.64/26,47.245.51.0/26,47.87.192.64/26,47.245.51.192/26,47.87.192.192/26,47.245.51.128/26,47.87.192.0/26,47.87.192.128/26

    US (Silicon Valley)

    Region ID

    Access method

    IP address block

    us-west-1

    Express Connect, VPN Gateway, or Smart Access Gateway

    100.104.175.0/24,100.104.48.128/26,100.104.166.64/26,100.104.108.128/26,100.104.100.128/26,100.104.136.192/26,100.104.16.64/26,100.104.242.64/26,100.104.57.192/26,100.104.11.64/26,100.104.24.192/26

    Cloud Enterprise Network (CEN)

    Public IP Address

    140.205.47.0/24,110.76.8.64/26,203.209.225.192/26,140.205.41.192/26,110.75.157.192/26,110.75.186.0/26,203.209.247.192/26,47.88.98.0/24,110.75.134.192/26,203.119.159.192/26,47.88.15.174,106.11.73.192/26,203.209.225.128/26,110.75.130.192/26,47.252.71.192/26,140.205.41.64/26,110.75.190.0/26,8.149.144.0/24,140.205.197.0/26,203.209.247.128/26,110.75.235.0/24,47.252.90.64/26,110.75.186.64/26,110.76.9.0/24,106.11.76.64/26,47.88.6.196,110.75.230.0/24,140.205.196.0/24,59.82.47.0/26,47.102.181.128/26,59.82.46.128/26,110.76.0.0/24,106.11.76.0/26,47.88.10.217,47.102.234.0/26,47.252.71.128/26,47.102.234.64/26,59.82.46.192/26,110.75.130.128/26,110.75.134.128/26,110.76.8.0/26,110.75.190.64/26,110.75.143.0/26,110.76.2.0/24,47.88.1.17,8.139.112.64/26,8.139.112.128/26,47.252.90.0/26,8.139.99.192/26,47.251.136.112/28,8.139.112.0/26,106.11.73.128/26,110.76.11.0/24,59.82.46.64/26,47.102.181.192/26,47.88.98.128/26,47.88.98.192/26,47.88.98.64/26,47.88.98.0/26,47.251.17.180,47.77.112.0/20,47.87.192.0/18

    US (Virginia)

    Region ID

    Access method

    IP CIDR block

    us-east-1

    Express Connect, VPN Gateway, or Smart Access Gateway

    100.104.233.0/24,100.104.240.128/26,100.104.132.64/26,100.104.177.192/26,100.104.12.0/26,100.104.111.0/26,100.104.122.128/26,100.104.87.192/26,100.104.179.64/26,100.104.41.64/26,100.104.238.64/26

    Cloud Enterprise Network (CEN)

    Public IP Address

    110.76.0.128/26,140.205.47.0/26,110.76.2.128/26,110.75.230.192/26,110.76.8.64/26,140.205.41.192/26,203.209.225.192/26,110.75.235.128/26,110.75.230.64/26,110.75.157.192/26,110.76.9.128/26,110.75.186.0/26,203.209.247.192/26,140.205.47.128/26,110.76.9.64/26,110.75.134.192/26,140.205.196.128/26,203.119.159.192/26,106.11.73.192/26,203.209.225.128/26,110.75.130.192/26,110.76.2.64/26,140.205.41.64/26,110.75.190.0/26,110.76.11.64/26,140.205.197.0/26,203.209.247.128/26,140.205.47.64/26,110.76.9.0/26,110.75.235.0/26,110.75.186.64/26,110.76.9.192/26,106.11.76.64/26,110.75.230.0/26,140.205.196.0/26,110.76.11.128/26,110.76.11.192/26,110.76.11.0/26,59.82.47.0/26,47.102.181.128/26,59.82.46.128/26,110.76.0.0/26,110.76.0.64/26,106.11.76.0/26,47.102.234.0/26,47.102.234.64/26,59.82.46.192/26,110.75.235.64/26,110.75.130.128/26,110.75.134.128/26,110.76.8.0/26,110.75.190.64/26,110.75.143.0/26,8.139.112.64/26,8.139.112.128/26,140.205.196.64/26,8.139.99.192/26,8.139.112.0/26,140.205.47.192/26,110.75.230.128/26,110.76.0.192/26,106.11.73.128/26,140.205.196.192/26,110.75.235.192/26,47.102.181.192/26,59.82.46.64/26,110.76.2.0/26,110.76.2.192/26,47.252.91.128/26,47.88.98.128/26,47.250.29.192/26,47.252.71.192/26,47.252.90.0/26,47.252.91.192/26,47.250.29.64/26,47.88.98.192/26,47.252.90.64/26,47.252.71.128/26,47.88.98.64/26,47.250.29.0/26,47.250.29.128/26,47.252.91.0/26,47.88.98.0/26,47.252.91.64/26,47.253.64.0/28,47.87.206.192/26,47.87.206.64/26,47.87.206.128/26,47.87.206.0/26,47.90.220.124,47.77.112.0/20,47.87.192.0/18

    Germany (Frankfurt)

    Region ID

    Access method

    CIDR block

    eu-central-1

    Express Connect, VPN Gateway, or Smart Access Gateway

    100.104.5.0/24,100.104.193.128/26,100.104.161.64/26,100.104.89.128/26,100.104.177.0/26,100.104.224.0/26,100.104.92.128/26,100.104.62.64/26,100.104.216.192/26

    Cloud Enterprise Network (CEN)

    Public IP Address

    8.209.86.0/26,47.254.165.128/26,47.245.155.0/28,47.254.165.64/26,47.254.165.192/26,47.254.180.0/24,110.76.0.128/26,140.205.47.0/26,110.76.2.128/26,110.75.230.192/26,110.76.8.64/26,140.205.41.192/26,203.209.225.192/26,110.75.235.128/26,110.75.230.64/26,110.75.157.192/26,110.76.9.128/26,110.75.186.0/26,203.209.247.192/26,140.205.47.128/26,110.75.134.192/26,110.76.9.64/26,140.205.196.128/26,203.119.159.192/26,106.11.73.192/26,203.209.225.128/26,110.75.130.192/26,110.76.2.64/26,140.205.41.64/26,110.75.190.0/26,110.76.11.64/26,140.205.197.0/26,203.209.247.128/26,140.205.47.64/26,110.76.9.0/26,110.75.235.0/26,110.75.186.64/26,110.76.9.192/26,106.11.76.64/26,110.75.230.0/26,140.205.196.0/26,110.76.11.128/26,110.76.11.192/26,110.76.11.0/26,59.82.47.0/26,47.102.181.128/26,59.82.46.128/26,110.76.0.0/26,110.76.0.64/26,106.11.76.0/26,47.102.234.0/26,47.102.234.64/26,59.82.46.192/26,110.75.235.64/26,110.75.130.128/26,110.75.134.128/26,110.76.8.0/26,110.75.190.64/26,110.75.143.0/26,8.139.112.64/26,8.139.112.128/26,8.139.99.192/26,140.205.196.64/26,8.139.112.0/26,140.205.47.192/26,110.75.230.128/26,110.76.0.192/26,106.11.73.128/26,140.205.196.192/26,110.75.235.192/26,47.102.181.192/26,59.82.46.64/26,110.76.2.0/26,110.76.2.192/26,47.87.212.0/26,47.87.212.64/26,47.87.212.128/26,47.87.212.192/26

    UK (London)

    Region id

    Access method

    IP address block

    eu-west-1

    Express Connect, VPN Gateway, or Smart Access Gateway

    100.104.133.64/26, 100.104.207.128/26, 100.104.87.192/26, 100.104.145.64/26, 100.104.235.192/26, 100.104.75.64/26, 100.104.132.64/26

    Cloud Enterprise Network (CEN)

    Public IP Address

    8.208.72.0/24, 8.208.73.0/24, 8.208.75.64/28, 47.88.98.0/24, 47.88.98.128/26, 47.88.98.192/26, 47.88.98.64/26, 47.88.98.0/26, 8.208.73.64/26, 8.208.72.64/26, 8.208.72.0/26, 8.208.72.128/26, 8.208.73.0/26, 8.208.73.128/26, 8.208.72.192/26, 8.208.73.192/26, 47.87.236.128/26, 47.87.236.0/26, 47.87.236.64/26, 47.87.236.192/26

    UAE (Dubai)

    Region ID

    Access method

    CIDR block

    me-east-1

    Express Connect, VPN Gateway, or Smart Access Gateway

    100.104.205.0/24,100.104.161.0/26,100.104.53.0/26,100.104.111.128/26,100.104.248.128/26

    Cloud Enterprise Network (CEN)

    Public IP Address

    8.209.86.0/26,47.254.165.128/26,47.254.165.64/26,47.254.165.192/26,47.87.212.0/26,47.87.212.64/26,47.87.212.128/26,47.87.212.192/26

    South Korea (Seoul)

    Region ID

    Access method

    CIDR block

    ap-northeast-2

    Express Connect, VPN Gateway, or Smart Access Gateway

    100.104.119.128/26, 100.104.153.64/26, 100.104.76.192/26, 100.104.246.192/26, 100.104.106.192/26, 100.104.210.128/26, 100.104.62.64/26

    Cloud Enterprise Network (CEN)

    Public IP Address

    149.129.14.128/26, 149.129.13.64/26, 149.129.14.192/26, 149.129.13.0/26

    Saudi Arabia (Riyadh)

    Region ID

    Access method

    CIDR blocks

    me-central-1

    Express Connect, VPN Gateway, or Smart Access Gateway

    100.104.106.192/26,100.104.145.64/26,100.104.210.128/26,100.104.48.128/26,100.104.69.0/26,100.104.76.192/26,100.104.87.192/26

    Cloud Enterprise Network (CEN)

    Public IP Address

    8.213.0.192/26,8.213.5.0/26,8.213.16.59,8.213.16.111,8.213.16.123,8.213.16.17,8.213.16.91,8.213.5.64/26,8.213.6.0/24,8.213.0.128/26,8.213.6.64/26,8.213.6.192/26,8.213.6.0/26,8.213.6.128/26

    Mexico (Mexico City)

    Region ID

    Access method

    IP address block

    na-south-1

    Express Connect, VPN Gateway, or Smart Access Gateway

    100.104.35.192/26,100.104.122.128/26

    Cloud Enterprise Network (CEN)

    Public IP Address

    47.246.169.0/26,47.87.0.64/26,47.89.89.64/26,47.246.171.0/26,47.87.196.128/26,47.246.170.128/26,47.246.168.64/26,47.89.75.0/26,47.87.1.0/26,47.89.89.192/26,47.87.196.0/26,47.246.170.64/26,47.89.74.192/26,47.235.1.64/26,47.89.75.64/26,47.87.196.64/26,47.87.196.192/26,47.87.0.192/26,47.246.170.192/26,47.246.169.128/26,47.246.168.0/26,47.89.89.128/26,47.235.1.128/26,47.89.74.128/26,47.246.168.192/26,47.246.169.192/26,47.87.0.128/26,47.235.0.192/26,47.246.171.64/26,47.246.164.192/26,47.246.169.64/26,47.235.1.192/26

    FAQ

    • Which port should be opened for the DTS IP address CIDR blocks?

      Open the port that your database uses. For example, the default port for MySQL is 3306, and the default port for PostgreSQL is 5432.

    • How should I handle the IP whitelist after a DTS task is complete?

      For security, after a DTS task completes, remove the DTS IP address CIDR blocks from your database's IP whitelist or security group. You can delete the whitelist groups (for example, rdsdts) or security groups (for example, SG-DTS-GROUP-xxxx) that DTS creates automatically.

    • Why are IP addresses from both the source and target regions required for public IP address access?

      This is required only for data synchronization tasks. DTS deploys worker nodes in both the source and target regions to perform bidirectional heartbeats and data comparisons. This ensures data consistency and link stability. Other task types, such as migration and change tracking, follow the single-region rule.

    Related APIs

    API

    Description

    Get DTS server IP addresses

    Returns the IP addresses of DTS servers.