Categories:

System functions (System Information)

SYSTEM$GET_SNOWFLAKE_EGRESS_IP_RANGES

Using egress IP addresses you generate with Snowflake, you can allow ingress access from the following Snowflake features:

  • External access from UDFs and procedures
  • Snowpark Container Services external access and Snowflake Openflow on Snowpark Container Services
  • Snowflake Git integration with IP-restricted Git servers

返回出口 IP 地址范围列表（如无类域间路由 (CIDR) IP 地址），可用于在服务器的 IP 允许列表中表示 Snowflake。

使用此函数获取出口 IP 地址范围列表，以允许外部服务器上的 Snowflake 流量通过。您可以将列表中的 IP 地址添加到外部服务器上的允许列表中，Snowflake 会从外部服务器发起请求。

例如，您可以允许部署在 Snowflake 上的用户定义的函数 (UDFs) 发出的请求能够访问外部服务器上的资源。为此，您需要将 Snowflake 出口 IP 地址添加到服务器的网络防火墙。

Addresses in the returned list expire. You can automate refreshes from the list as described in Securing ingress of Snowflake requests with egress IP addresses.

语法

SYSTEM$GET_SNOWFLAKE_EGRESS_IP_RANGES()

返回

Returns JSON containing a list of CIDR IP addresses, effective date, and an expiration date for each address. The following example shows what the return value looks like:

SELECT SYSTEM$GET_SNOWFLAKE_EGRESS_IP_RANGES();
{
  "ipv4_prefix": "153.45.151.0/24",
  "effective": "2025-06-30T23:59:59Z",
  "expires": "2026-08-30T23:59:59Z"
}

使用说明

关于返回的 CIDR IP 地址范围列表，请记住以下几点：

  • Each IP address expires. The returned list includes both the IP address and its expiration date and time. To allow continued access from Snowflake, automate refreshing your allowlist with addresses that have not yet expired.

    For more information, see Securing ingress of Snowflake requests with egress IP addresses.

  • 地址范围限定为 Snowflake 部署的区域。一个区域的地址与另一个区域的地址不同。

  • 地址在该区域的 Snowflake 账户之间共享。换句话说，地址并不是 Snowflake 账户所独有的。