PowerBI servers list - postgresql

Question

I have a fact table in Postgresql database and I what to build a PowerBI analysis with PowerBI professional.
If I let Postgresql accept connections from all internet IP addresses, it works but it is not safe. I'd like to limit the access only to Power BI servers.
How can I identify PowerBI incoming traffic? Is there a best practice to set up the firewall?

Answer 1

You should not open any connections from Internet. Yes, you can get a list of all Azure IP addresses, but this does not limit them to Power BI only, plus it is a manual process to update the list few times a year. A lot better solution is to install Power BI Gateway in your network, which will allow connecting from Power BI Service to your server on-premise.

Answer 2

In my case I prefered to update once in a while my pg_hba.conf with the white list from the official Microsoft list. The production file is overwrittern with a new file. The script replaces a comment line
#PowerBI
in a template pg_hba.conf file with the new list
With the new list
import requests
whiteListUrl = "https://download.microsoft.com/download/7/1/D/71D86715-5596-4529-9B13-DA13A5DE5B63/ServiceTags_Public_20210524.json"
modelFile = "/path/to/template/pg_hba.conf"
outputFileName = "/path/to/production/pg_hba.conf"
userName = "power_bi"
response = requests.get(whiteListUrl)
whiteLists = response.json()
for group in whiteLists["values"]:
if group["name"]!='PowerBI':
continue
text_file = open(modelFile, "r").read()
whiteList = ""
for address in group["properties"]["addressPrefixes"]:
whiteList += "host all {} {} md5\n".format(userName, address)
text_file = text_file.replace("#PowerBI", whiteList)
textfile = open(outputFileName, "w")
a = textfile.write(text_file)
textfile.close()