Bubble.io

Bubble’s shared clusters utilize ephemeral AWS nodes where outbound requests originate from a rotating pool of thousands of dynamic IP addresses across over 80+ shifting nodes. Attempting to whitelist Bubble natively is a major security risk, as it requires opening your firewall to thousands of shared AWS addresses that change without notice. QuotaGuard provides a fixed exit point that stays constant even as your Bubble infrastructure scales or migrates across different cloud nodes.

• Static Egress for the Bubble API Connector: Provide your specific Bubble project with a dedicated exit point. This allows you to scale your app without ever needing to update your partner’s IP allowlist or risk connection failures during horizontal scaling on shared AWS us-east-1 ranges.
• Secure Bridge for the SQL Database Connector: Many corporate firewalls (Azure, AWS RDS, SQL Server) require a static IP to permit a connection. QuotaGuard acts as a secure bridge to connect Bubble directly to your firewalled database with a single, stable IP instead of opening your database to the entire public internet.
• Reliable Webhook Ingress (Static Inbound): QuotaGuard Shield provides a stable inbound IP address for third-party services that require a single, static destination IP for webhooks. This ensures your incoming integrations never break when Bubble scales its underlying infrastructure.
• Persistent Workflow Connections: Bubble's backend workflows have a hard-coded 300-second (5 minute) timeout. QuotaGuard is architected to maintain stable, persistent outbound connections, ensuring that heavy data processing or long-running API jobs don't fail due to proxy-level resets.
• Compliance Hardening (BAA available on Shield Production and above): Bubble does not sign BAAs on standard plans. Shield uses SSL passthrough, and neither Static nor Shield ever decrypts your outbound payload. Shield's difference is the hop between your app and the proxy: Static's hop uses the plain HTTP proxy protocol, while Shield encrypts it with TLS. Use Shield for regulated data such as HIPAA or PCI workloads. That supports customers' HIPAA, PCI-DSS, and SOC 2 requirements.
• Low-Latency Region Matching: Co-locate your QuotaGuard gateway in the same data center (typically AWS US-East-1) to ensure ultra-low latency (typically under 10ms). This helps stay within Bubble’s strict 30-second API timeout limit and minimizes the "network hop" overhead.

Maintain a consistent static identity for your dynamic Bubble.io workloads.

Go directly to the Bubble.io Integration Guide.