Skip to main content

Prerequisites

  • If your MongoDB deployment requires IP whitelisting, have the data-syncing service’s static IP available to complete Step 3.

Step 1: Locate your connection information

  1. If you are running self-managed MongoDB, connect as an admin user and run the following command to find your replica set’s host identifiers.
  1. If you are using MongoDB Atlas, open your cluster in the Atlas dashboard, click Connect, then Drivers, and copy the host identifier from the mongodb+srv connection string (in the form some-cluster.some-characters.mongodb.net).

Step 2: Create a writer user

Create a database user to perform the writing of the source data.
  • If you are running self-managed MongoDB, connect as an admin user and run:
  • If you are using MongoDB Atlas, go to Security > Database Access > Add New Database User, choose Password authentication, and grant the readWrite role scoped to your target database.

Step 3: Allow network access

  • If you are running self-managed MongoDB, configure your firewall to whitelist the data-syncing service’s static IP.
  • If you are using MongoDB Atlas, add the static IP under Security > Network Access > Add IP Address, either through the UI or with the Atlas CLI:
Network allowlistingCloud-hosted (US): 35.192.85.117/32Cloud-hosted (EU): 104.199.49.149/32If private-cloud or self-hosted, contact your Thanx representative for the static egress IP.

Step 4: Add your destination

Securely share your host identifier, database name, your chosen collection prefix, username, and password with us to complete the connection. A port is not required for MongoDB Atlas connections.

Permissions checklist

  • Network or firewall rules allow inbound connections from the data-syncing service’s static egress IP.
  • The database user has the readWrite role scoped to the target database.
  • If using MongoDB Atlas, the static IP has been added via the UI or the Atlas CLI (atlas accessLists create).

FAQ

The connection uses a dedicated MongoDB user with the readWrite role scoped to the target database. Network access can be restricted to the static egress IP.