--- title: Can I get a fixed IP address for my Vercel deployments? description: You can allowlist IP addresses with Vercel Secure Compute and Static IPs url: /kb/guide/can-i-get-a-fixed-ip-address canonical_url: "https://vercel.com/kb/guide/can-i-get-a-fixed-ip-address" published: 2025-11-03 last_updated: 2026-07-16 authors: William Li, Matthew Sweeney, Paulo Guarnier De Mitri related: - /docs/security/deployment-protection - /docs/security/vercel-waf/custom-rules - /docs/connectivity/static-ips - /docs/security/secure-compute - /docs/secure-compute install_vercel_plugin: npx plugins add vercel/vercel-plugin --- ## Related pages > **For AI agents:** Follow these links to understand how this page connects to the rest of the Vercel ecosystem. For the full cross-link map (inbound, outbound, prerequisites, and semantic neighbors), see the .graph.md link below. - [Static IPs](https://vercel.com/docs/networking/static-ips?from=related) — Access IP-restricted backend services through shared static egress IPs for Pro and Enterprise teams. - [Getting Started](https://vercel.com/docs/networking/static-ips/getting-started?from=related) — Learn how to set up Static IPs for your Vercel projects to connect to IP-restricted backend services. - [Secure Compute](https://vercel.com/docs/networking/secure-compute?from=related) — Secure Compute provides dedicated private networks with VPC peering for Enterprise teams. - [Networking](https://vercel.com/docs/networking?from=related) — Connect your Vercel projects to backend services with static IPs and secure networking options. - [How can I allowlist IP addresses for a deployment?](https://vercel.com/kb/guide/how-to-allowlist-deployment-ip-address?from=related) — You can securely connect a deployment to external services by using a stable set of IP addresses. - [Trusted IPs](https://vercel.com/docs/deployment-protection/methods-to-protect-deployments/trusted-ips?from=related) — Trusted IPs let you restrict access to your deployments to a list of allowed IP addresses. - [Can I use Vercel to deploy to a private cloud?](https://vercel.com/kb/guide/can-i-use-vercel-to-deploy-to-a-private-cloud?from=related) — Learn about if it's possible to deploy to a private cloud with Vercel. - [How to lock down deployments on Vercel and v0](https://vercel.com/kb/guide/locking-down-deployments?from=related) — Protect who can see your deployments. - [How can I use Vercel with GitHub IP restrictions?](https://vercel.com/kb/guide/use-vercel-with-github-ip-restrictions?from=related) — This guide will describe how you can use Vercel even when you have an IP allowlist configured in GitHub. - [Should I use Cloudflare in front of Vercel?](https://vercel.com/kb/guide/cloudflare-with-vercel?from=related) — Information on using Cloudflare together with Vercel. Full cross-link map for this page: [/kb/guide/can-i-get-a-fixed-ip-address.graph.md](/kb/guide/can-i-get-a-fixed-ip-address.graph.md) Vercel's infrastructure uses a range of dynamic IP addresses. - **Hobby and Pro customers** can restrict access to their deployments through [Deployment Protection](https://vercel.com/docs/security/deployment-protection) and [Firewall custom rules](https://vercel.com/docs/security/vercel-waf/custom-rules). - **Pro customers** with the [Static IPs](https://vercel.com/docs/connectivity/static-ips) add-on enabled will have outgoing connections between Vercel Functions and backend infrastructure established through a known set of IPs. - **Enterprise customers** with [Vercel Secure Compute](https://vercel.com/docs/security/secure-compute) can establish private connections between Vercel Functions and backend infrastructure such as databases. This guide will show how to allowlist IP addresses for a deployment using [Vercel Secure Compute](https://vercel.com/docs/security/secure-compute). ## Overview [Vercel Secure Compute](https://vercel.com/docs/secure-compute) gives you the ability to restrict connections between your backend infrastructure and your Vercel deployments. This might be necessary for teams with more strict security and compliance rules. Secure Compute places your builds and deployments in an isolated, private network with dedicated IP addresses. [Vercel Static IPs](https://vercel.com/docs/connectivity/static-ips) will allow your Vercel Functions to access backend services that require IP allowlisting through static egress IPs. ## Working with Static IPs First, go to the [pricing section](https://vercel.com/docs/connectivity/static-ips#pricing) of our documentation to understand how much this feature would cost if you decide to enable it. To enable Vercel Static IPs for a project: 1. Go to your Project Dashboard 2. Navigate to Project Settings 3. Click the Connectivity section 4. Click Manage Active Regions 5. Pick a region close to your backend services to keep latency down. You can pick up to 3 regions 6. Your project gets assigned static IPs within a shared VPC for each configured region A static IP will be shown to you that you must copy and add to your backend infrastructure as an allowed source of traffic. A fixed IP alone does not guarantee security, and it is still recommended to use authentication methods such as user and password pairs, public and private key pairs, or other methods to fully secure your resources. > To utilize Secure Compute for enhanced security and compliance, you need to upgrade to the Enterprise plan. [Reach out to Vercel](https://vercel.com/contact/sales) for more information. ## Working with Secure Compute To enable Vercel Secure Compute for a project: 1. Vercel places your project's build infrastructure and deployment in a private network 2. This network will have a specific dedicated IP address pair 3. You can optionally exclude the build container from this private network ### Dedicated IP Addresses - Secure Compute provides private networks with automatically assigned IP pairs, accessible through the Vercel Dashboard - On requesting access, Vercel creates one private network in a chosen Vercel Function region - Multiple private networks can be created within the same team by making requests through the Dashboard - The Secure Compute feature affects Vercel Functions using the Node.js runtime only ### Region Selection Each private network is deployed within a specific Vercel Function region. We recommend to pick a region for the private network that aligns with the location of your backend cloud to ensure optimal performance. ## Securing Your Backend After obtaining your dedicated IP pair: 1. Utilize the IP pair to set up an access control list for your backend infrastructure. 2. Besides IP-based authentication, ensure the use of additional authentication methods like user/password or an authentication key. ## Configuring Secure Compute Within a team: 1. Connect a private network with the environment of your Project's deployment, i.e., Vercel Functions and Incremental Static Regeneration (ISR) 2. A single private network can be used across multiple projects, sharing the same IP pair 3. For heightened security or larger teams, assign one private network to each project. This way, every project has a unique dedicated IP pair 4. If deploying Vercel Functions in multiple regions, use multiple private networks, ensuring distinct IP pairs per region 5. Allocate various IPs to different types of projects for enhanced security and management ## Need VPC or VPN Support? For those with rigorous security and compliance requirements, Vercel can provide guidance tailored to specific needs. [Reach out](https://vercel.com/contact/sales) if dedicated IP addresses aren't sufficient for your case. ## Conclusion Leveraging Vercel Secure Compute ensures enhanced privacy and security for your Vercel deployments. It allows you to maintain a private connection between your Serverless Functions and backend infrastructure, significantly reducing potential risks.