Prerequisites
- If your MongoDB deployment requires IP whitelisting, have the data-syncing service’s static IP available to complete Step 3.
Step 1: Locate your connection information
- If you are running self-managed MongoDB, connect as an admin user and run the following command to find your replica set’s host identifiers.
- If you are using MongoDB Atlas, open your cluster in the Atlas dashboard, click Connect, then Drivers, and copy the host identifier from the
mongodb+srvconnection string (in the formsome-cluster.some-characters.mongodb.net).
Step 2: Create a writer user
Create a database user to perform the writing of the source data.- If you are running self-managed MongoDB, connect as an admin user and run:
- If you are using MongoDB Atlas, go to Security > Database Access > Add New Database User, choose Password authentication, and grant the
readWriterole scoped to your target database.
Step 3: Allow network access
- If you are running self-managed MongoDB, configure your firewall to whitelist the data-syncing service’s static IP.
- If you are using MongoDB Atlas, add the static IP under Security > Network Access > Add IP Address, either through the UI or with the Atlas CLI:
Network allowlistingCloud-hosted (US):
35.192.85.117/32Cloud-hosted (EU): 104.199.49.149/32If private-cloud or self-hosted, contact your Thanx representative for the static egress IP.Step 4: Add your destination
Securely share your host identifier, database name, your chosen collection prefix, username, and password with us to complete the connection. A port is not required for MongoDB Atlas connections.Permissions checklist
- Network or firewall rules allow inbound connections from the data-syncing service’s static egress IP.
- The database user has the
readWriterole scoped to the target database. - If using MongoDB Atlas, the static IP has been added via the UI or the Atlas CLI (
atlas accessLists create).
FAQ
How is the MongoDB connection secured?
How is the MongoDB connection secured?
The connection uses a dedicated MongoDB user with the
readWrite role scoped to the target database. Network access can be restricted to the static egress IP.