# Network

Managed [Workers](/docs/lakehouse/workers.md) connect to your databases and warehouses over the network. If inbound traffic is restricted, allow Altertable's egress IP addresses. If the catalog is not reachable from the public internet, you can also connect through an [SSH tunnel](/docs/lakehouse/external-catalogs.md).

## Egress IP addresses

Managed Workers connect from a fixed set of public IPv4 addresses. Allow these addresses so Altertable can reach the catalog.

Self-hosted Workers use your own network instead. They do not egress from the addresses below.

Allow every address. Firewalls that require a prefix can use `/32`.

```text
46.224.237.164
46.4.253.101
94.130.221.56
188.40.149.154
138.199.242.155
138.199.241.17
```

### Where to allow them

- **[MongoDB Atlas](/docs/lakehouse/external-catalogs/mongodb.md)**: [IP Access List](https://www.mongodb.com/docs/atlas/security/ip-access-list/) under **Network Access**. Add each address (or `address/32`).
- **[Snowflake](/docs/lakehouse/external-catalogs/snowflake.md)**: include the addresses in a network rule and attach it to the user Altertable uses.
- **Self-hosted databases**: allow inbound TCP from these addresses on the database port, or connect through an [SSH tunnel](/docs/lakehouse/external-catalogs.md).