# Connecting to a private database

**URL:** <https://community.embeddable.com/t/connecting-to-a-private-database/44>\
**Category:** FAQs\
**Created:** [March 27, 2024, 1:51pm UTC](https://community.embeddable.com/t/connecting-to-a-private-database/44 "2024-03-27T13:51:07Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![ella-embeddable](https://dub1.discourse-cdn.com/flex013/user_avatar/community.embeddable.com/ella-embeddable/32/15_2.png) [@ella-embeddable](https://community.embeddable.com/u/ella-embeddable)\
**Post date:** [March 27, 2024, 1:51pm UTC](https://community.embeddable.com/t/connecting-to-a-private-database/44/1 "2024-03-27T13:51:07Z")

</div>

Embeddable uses `jump-server` to securely connect to customer databases which are not publicly accessible. To connect to a private database, a secure connection between Embeddable servers and the client’s Bastion host must be established first. To establish a secure connection SSH tunnel is used.

To connect your private database, you need to:

1. Whitelist Embeddable IP addresses:

```jsx
embeddable IPs: "34.23.233.7", "34.23.153.222"

```

1. Add the following public key to bastion user which will be used for establishing SSH tunnel:

```json
ssh-rsa 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 jump-server@embeddable.com

```

1. Share the following info with our team:
  1. Bastion user
  2. Bastion host
  3. Host and port of the database (must be accessible from Bastion host)
  4. Database credentials needed by Cube