Firewall access for watsonx.ai Studio
Inbound firewall access is granted to the watsonx.ai Studio service by allowing the IP addresses for Cloud Pak for Data as a Service on IBM Cloud.
If watsonx.ai Studio is installed behind a firewall, you must add the WebSocket connection for your region to the firewall settings. Enabling the WebSocket connection is required for notebooks and RStudio.
Following are the WebSocket settings for each region:
| Location | Region | WebSocket |
|---|---|---|
| United States (Dallas) | us-south | wss://dataplatform.cloud.ibm.com |
| Europe (Frankfurt) | eu-de | wss://eu-de.dataplatform.cloud.ibm.com |
| United Kingdom (London) | eu-gb | wss://eu-gb.dataplatform.cloud.ibm.com |
| Asia Pacific (Tokyo) | jp-tok | wss://jp-tok.dataplatform.cloud.ibm.com |
Follow these steps to look up the IP addresses for Cloud Pak for Data as a Service and allow them on IBM Cloud:
- From the main menu, choose Administration > Cloud integrations.
- Click Firewall configuration to display the IP addresses for the current region. Use CIDR notation.
- Copy each CIDR range into the IP address restrictions for either a user or an account. You must also enter the allowed individual client IP addresses. Enter the IP addresses as a comma-separated list. Then, click Apply.
- Repeat for each region to allow access for watsonx.ai Studio.
When you configure the allowed IP addresses for watsonx.ai Studio, you include the CIDR ranges for the watsonx.ai Studio cluster. You can also allow individual client system IP addresses.
For step-by-step instructions for both user and account restrictions, see IBM Cloud docs: Allowing specific IP addresses
Parent topic: Configuring firewall access