Enable external connections
Expose an optional PostgreSQL endpoint protected by TLS.
Enable a hostname
- Open the database and select Connectivity in the sidebar.
- Under External connection, select Enable external hostname.
- Wait for the hostname to appear and refresh connection details.
- Configure a PostgreSQL client with that hostname, the displayed port, and an active database account.
- Verify a new TLS connection using Connect to PostgreSQL.
Clients must support PostgreSQL TLS negotiation and send SNI. Use the managed hostname rather than a raw IP address. This feature allocates a platform hostname; it is not a custom-domain editor.
Disable external access
Select Disable external hostname when public access is no longer needed. Disabling it does not terminate existing sessions. Applications on the private project network use their private endpoint independently.
If the external hostname remains unavailable, contact support with the resource ID and displayed error.
Restrict source addresses
Open Firewall Policy, enable Enable IP allowlist, and add the IP addresses or CIDR ranges that may connect. You can label each entry and save up to 32 entries. Single IPv4 addresses use /32; IPv6 addresses use /128.
Optionally select Allow connections via RDC internal gateway. This starts off and allows connections sharing the gateway address together; it does not identify an individual client or limit permission to your workspace. Database credentials are still required. You can use the option alone or alongside named IP rules.
Enabling the policy requires at least one valid IP entry or the gateway option. If the option is unavailable, contact support with the resource ID. If a saved gateway permission becomes unavailable, public access is blocked until it is restored or you remove that permission and save valid IP rules.
Disabling the policy clears both the IP list and gateway permission, allowing all source addresses to the enabled public endpoint. Test changes with new connections; existing sessions may remain connected.