Network Access & IP Whitelisting
For UptimeDock to monitor your ClickHouse database, our monitoring servers need network access to your ClickHouse instance. If your database is not publicly accessible, you'll need to whitelist our IP addresses.
Overview
Many organizations restrict database access to specific IP addresses for security reasons. This is a best practice that we fully support. To enable monitoring while maintaining security, you can add UptimeDock's monitoring IP addresses to your whitelist.
You only need to whitelist IP addresses if your ClickHouse instance is behind a firewall or has IP-based access restrictions. If your database is publicly accessible (not recommended for production), you can skip this step.
UptimeDock IP Addresses
Add the following IP address to your whitelist to allow UptimeDock to connect to your ClickHouse database:
| Region | Hostname | IP Address |
|---|---|---|
| US West (Oregon) | clickhouse-us-west-2.uptimedock.com | 54.214.39.52 |
We recommend whitelisting by hostname when possible, as IP addresses may change during infrastructure updates. If you must use IP addresses, check this page periodically for updates or subscribe to our status page for notifications.
ClickHouse Cloud Setup
If you're using ClickHouse Cloud, you can easily add UptimeDock's IP address to your access list through the ClickHouse Cloud console.
Step 1: Access Settings
- Log in to your ClickHouse Cloud account
- From the left sidebar menu, click on Settings
- Navigate to the Security section
Step 2: Add IP to Access List
- Under the Security header, select the Security tab
- Find the IP access list section
- Click Add entry or the equivalent button to add a new IP
- Enter the UptimeDock IP address:
54.214.39.52 - Add a description like "UptimeDock Monitoring"
- Save your changes
Adding a clear description helps your team understand why this IP is whitelisted. We recommend using "UptimeDock Monitoring - US West" as the description.
Self-Hosted ClickHouse
For self-hosted ClickHouse instances, you'll need to work with your system administrators or network team to add UptimeDock's IP address to your firewall rules.
Common steps include:
- Adding an inbound firewall rule to allow TCP traffic from
54.214.39.52 - Allowing access to the ClickHouse native protocol port (typically
9000or9440for TLS) - Updating security group rules if hosted on AWS, GCP, or Azure
- Configuring iptables or firewalld rules for on-premise deployments
Example iptables rule:
# Allow UptimeDock monitoring access to ClickHouse
iptables -A INPUT -s 54.214.39.52 -p tcp --dport 9000 -j ACCEPT
iptables -A INPUT -s 54.214.39.52 -p tcp --dport 9440 -j ACCEPTExample AWS Security Group rule:
| Type | Protocol | Port Range | Source | Description |
|---|---|---|---|---|
| Custom TCP | TCP | 9000 | 54.214.39.52/32 | UptimeDock Monitoring |
| Custom TCP | TCP | 9440 | 54.214.39.52/32 | UptimeDock Monitoring (TLS) |
If you're unsure how to configure your firewall or need assistance, please contact our support team. We're happy to help you set up network access securely.
Verify Connection
After adding the IP address to your whitelist, you can verify the connection by:
- Going to the Create New Check page
- Entering your ClickHouse connection details
- Clicking the Test Connection button
A successful test confirms that UptimeDock can reach your ClickHouse instance. If the test fails, double-check that:
- The IP address is correctly added to your whitelist
- The correct port is open (9000 for native protocol, 9440 for TLS)
- Any intermediate firewalls or security groups also allow the traffic
Once your connection test succeeds, you can proceed with the Quick Setup Guide to complete your ClickHouse monitoring configuration.