Before you connect
Network access — Supaboard connects from a fixed set of egress IPs. Add them to your ClickHouse server or ClickHouse Cloud service’s IP allow-list before attempting a connection. The current IP list is shown inside the connector form under Whitelist IPs. Database user permissions — The user you provide needs at minimum:SELECTprivilege on the target database and tables
Connection fields
Port note — Supaboard connects over the native TCP protocol on port9000. This is different from the HTTP interface (port8123) and the HTTPS interface (port8443). ClickHouse Cloud uses port9440for secure native TCP — check your Cloud service details if9000does not connect.
Finding your connection details
ClickHouse Cloud
- Open clickhouse.cloud and select your service.
- On the service detail page, go to Connect.
- Select Native as the connection method.
- Copy the Host (format:
xxxxx.clickhouse.cloud) and Port (typically9440for secure native TCP on ClickHouse Cloud). - Use the default user or a custom user you have created.
- Under Security → IP Access List, add each Supaboard egress IP to allow connections.
ClickHouse Cloud uses portDocumentation: ClickHouse Cloud connection details · IP access list9440(TLS-enabled native TCP), not9000. Update the Port field accordingly.
Self-hosted ClickHouse
- Your Host is the server’s IP address or hostname.
- The default native TCP Port is
9000. - Check
/etc/clickhouse-server/config.xml(orconfig.d/) for any custom port configuration. - Ensure the server’s firewall allows inbound TCP on port
9000from Supaboard egress IPs.
IPsec Site-to-Site VPN
If your database lives on a private network, you can peer your VPN gateway with Supaboard over IKEv2 IPsec instead of exposing the database or running a bastion host. Enable the Use IPsec site-to-site VPN toggle in the connector form.
Checklist:
- Your VPN gateway has one IKEv2 + pre-shared-key tunnel per Supaboard IP (the IPs shown under Whitelist IPs)
- The gateway allows UDP 500, UDP 4500, and ESP (IP protocol 50) from those IPs
- The Host field is the database’s private IP address — private DNS names don’t resolve from Supaboard
- Enter the database name manually — auto-discovery doesn’t run through the VPN before the connection is saved
Recommended database user permissions
your_database with the target database name. For multiple databases, repeat the GRANT SELECT line for each one.

