Static IP Addresses Required to Configure Access to Tableau Map Servers

Version 23

    Issue

    You need static IPs to configure firewall rules to access Tableau maps and the default Tableau map servers do not have static IP addresses

    Environment

    • Tableau Server
    • Tableau Desktop
    Resolution

    Important: The following procedure is not a recommended or supported configuration of Tableau software for the following reason:

    • The proxy IP addresses can change at any time without notice. Best practice is to use the host names for the map server (the default configuration).

     

    Configure Tableau Desktop/Server to use the Tableau Map Proxy, which utilizes static IP Addresses, and adjust firewall rules to allow connections to these IP Addresses.

     

    To configure Tableau Desktop/Server to use the Tableau Map Proxy:

    1. In a text editor, such as Notepad, open the Online.tms (8.1 and earlier versions) and Tableau.tms (8.2 and later versions) for any Tableau software that uses map servers. The default locations for the .tms files are as follows:
      • For Tableau Desktop on the Mac -/Users/<user>/Documents/My Tableau Repository/Mapsources
      • For Tableau Desktop on Windows - C:\Users\<user>\Documents\My Tableau Repository\Mapsources
      • For Tableau Server on Windows- C:\Program Files\Tableau\Tableau Server\packages\vizqlserver.<version>\mapsources
      • For Tableau Server on Linux -/opt/tableau/tableau_server/packages/vizqlserver.<build number>/Mapsources
    1. On the third line of each file, do the following:
      • Tableau.tms (2019.2 and higher)
        • Replace the params-url from mapsconfig.tableau.com/v1/config.json to mapsproxy.tableau.com/mbconfig/v1/config.json.
        • Replace the server from api.mapbox.com with mapsproxy.tableau.com

    screenshot_maps20192.png

      • Tableau.tms (8.2 through 2019.1, inclusive)
        • Replace maps.tableausoftware.com with mapsproxy.tableau.com

      • Online.tms (8.1 and earlier)
        • Replace mapspatial.tableausoftware.com with mapsproxy.tableau.com
        • Replace mapvisual2.tableausoftware.com with mapsproxy.tableau.com

       3. Save and close each file, and restart Tableau.

       4. Use the following Tableau proxy map server IP addresses to create static firewall rules:

      • mapsproxy.tableau.com is a load balanced DNS that resolves to both of:
        • 75.2.71.15
        • 99.83.249.141
    Root CauseThe standard Tableau map servers are not tied directly to single IP addresses.
    Additional Information
    • Between March 16, 2020 and June 17, 2020, The mapsproxy.tableau.com DNS will also point to 54.70.6.148 and 35.155.234.192, in addition to the IP addresses mentioned in the previous bullet points. During this time window, you should also whitelist these two additional IP addresses in order to ensure functionality of the proxy. These two additional IP addresses will cease to function after June 17, 2020, and can be removed from your firewall exceptions after that date.
    • IP addresses need to be white-listed and exempted from any other security restrictions that may block access.
    • Upgrading your Tableau product will remove this customization.
    Related Links

    Announcement: Amazon CloudFront IP Ranges Are Now Available in JSON Format

    Internet Access Requirements

    Configuring Proxies for Tableau Server

     

    Please read: feel free to update this article as the information evolves.