SQL Database - Downlevel clients support and IP endpoint changes for Table Auditing
This document applies only to Table Auditing, which is now deprecated.
Please use the new Blob Auditing method, which does not require downlevel client connection string modifications. Additional info on Blob Auditing can be found in Get started with SQL database auditing.
Database Auditing works automatically with SQL clients that support TDS redirection. Note that redirection does not apply when using the Blob Auditing method.
Downlevel clients support
Any client which implements TDS 7.4 should also support redirection. Exceptions to this include JDBC 4.0 in which the redirection feature is not fully supported and Tedious for Node.JS in which redirection was not implemented.
For "Downlevel clients", i.e. which support TDS version 7.3 and below - the server FQDN in the connection string should be modified:
Original server FQDN in the connection string: <server name>.database.windows.net
Modified server FQDN in the connection string: <server name>.database.secure.windows.net
A partial list of "Downlevel clients" includes:
- .NET 4.0 and below,
- ODBC 10.0 and below.
- JDBC (while JDBC does support TDS 7.4, the TDS redirection feature is not fully supported)
- Tedious (for Node.JS)
Remark: The above server FQDN modification may be useful also for applying a SQL Server Level Auditing policy without a need for a configuration step in each database (Temporary mitigation).
IP endpoint changes when enabling Auditing
Please note that when you enable Table Auditing, the IP endpoint of your database will change. If you have strict firewall settings, please update those firewall settings accordingly.
The new database IP endpoint will depend on the database region:
|Database Region||Possible IP endpoints|
|China North||188.8.131.52, 184.108.40.206|
|China East||220.127.116.11, 18.104.22.168|
|Australia East||22.214.171.124, 126.96.36.199, 188.8.131.52, 184.108.40.206|
|Australia Southeast||220.127.116.11, 18.104.22.168, 22.214.171.124, 126.96.36.199|
|Brazil South||188.8.131.52, 184.108.40.206, 220.127.116.11, 18.104.22.168|
|Central US||22.214.171.124, 126.96.36.199, 188.8.131.52, 184.108.40.206|
|Central US EUAP||220.127.116.11, 18.104.22.168|
|East Asia||22.214.171.124, 126.96.36.199, 188.8.131.52, 184.108.40.206|
|East US 2||220.127.116.11, 18.104.22.168, 22.214.171.124, 126.96.36.199|
|East US||188.8.131.52, 184.108.40.206, 220.127.116.11, 18.104.22.168|
|East US EUAP||22.214.171.124, 126.96.36.199|
|Central India||188.8.131.52, 184.108.40.206|
|South India||220.127.116.11, 18.104.22.168|
|West India||22.214.171.124, 126.96.36.199|
|Japan East||188.8.131.52, 184.108.40.206, 220.127.116.11, 18.104.22.168|
|Japan West||22.214.171.124, 126.96.36.199, 188.8.131.52, 184.108.40.206|
|North Central US||220.127.116.11, 18.104.22.168, 22.214.171.124, 126.96.36.199|
|North Europe||188.8.131.52, 184.108.40.206, 220.127.116.11, 18.104.22.168|
|South Central US||22.214.171.124, 126.96.36.199, 188.8.131.52, 184.108.40.206|
|Southeast Asia||220.127.116.11, 18.104.22.168, 22.214.171.124, 126.96.36.199|
|West Europe||188.8.131.52, 184.108.40.206, 220.127.116.11, 18.104.22.168, 22.214.171.124, 126.96.36.199, 188.8.131.52, 184.108.40.206|
|West US||220.127.116.11, 18.104.22.168, 22.214.171.124, 126.96.36.199|
|West US 2||188.8.131.52, 184.108.40.206|
|West Central US||220.127.116.11, 18.104.22.168|
|Canada Central||22.214.171.124, 126.96.36.199|
|Canada East||188.8.131.52, 184.108.40.206|
|UK North||220.127.116.11, 18.104.22.168|
|UK South 2||22.214.171.124, 126.96.36.199|
We'd love to hear your thoughts. Choose the type you'd like to provide:
Our feedback system is built on GitHub Issues. Read more on our blog.