Your on-premises SQL Server only accepts connections from approved addresses. So does the API behind your corporate firewall. Here is how Vince Platform gets through, without opening either of them to the internet.
Workflow steps run on a pool of cloud infrastructure. By default, a request can leave from a different IP address every time. A firewall that only accepts known addresses has nothing to allow-list.
Static IP solves this. Requests made through a Connection with Use Static IP turned on always leave from fixed addresses. You allow-list those, and Vince Platform can reach your system.
The difference between the options is who else can use the address.
| Default | Shared static IP | Dedicated static IP | |
|---|---|---|---|
| Your firewall says | “Anyone is fine” | “Vince Platform is fine” | “Only my own Vince tenant is fine” |
| Traffic comes from | A different address every time | Two fixed addresses, shared by all tenants using Static IP | One address, used only by you |
| Cost | No extra charge | No extra charge within fair use | Extra charge |
| How to get it | Nothing to do | Turn on Use Static IP on the Connection | Ask Vince support. Setup takes 2–3 days |
Start with the shared addresses. You do not need to ask anyone, and they cost nothing extra. Choose a dedicated IP when your security policy does not accept an address that other companies also use. With a dedicated IP, allowing the address means allowing only your own tenant.
Some of the systems you need do not speak HTTP at all. SQL Server is the typical example. Since October, Vince Platform supports SOCKS5 proxy connections, so a Code step can open a raw connection to TCP-based systems like these.
SOCKS5 traffic goes out through the same static IP, shared or dedicated. A dedicated IP setup now requires a SOCKS5 port, which helps prevent half-finished connection setups.
Find out what your firewall should accept. If “Vince Platform” is enough, allow-list the two shared addresses from the Static IP guide and turn on Use Static IP on the Connection. If it must be your tenant only, contact Vince support and allow 2–3 days before you need it.