Static IPs

Static IPs are available on Enterprise and Pro plans.

With Static IPs (shared pool), you can access backend services that require IP allowlisting through static egress IPs. It's designed for Pro and Enterprise teams who need static IP functionality without the dedicated network or security features of Secure Compute.

If you need dedicated infrastructure, VPC peering, or complete network isolation, consider Secure Compute.

When to use Static IPs

• Connect to databases such as Amazon RDS, Google Cloud SQL, Azure SQL, and MongoDB Atlas
• Connect to APIs such as Auth0, PayPal, Stripe, internal corporate APIs
• Connect to systems such as on-premises databases and services behind firewalls
• Support compliance and business requirements

When not to use Static IPs

Static IP is a service provided by Vercel that assigns a set of fixed outbound IP addresses used for egress traffic from your deployments. It does not assign a fixed public IP that external users or services can use to directly access or initiate inbound (ingress) traffic to your app. Therefore, Static IPs should not be used if you need your app to be reachable through a fixed inbound IP or require ingress traffic support, as inbound connections do not route through the Static IP service.

Static IPs or Secure Compute

Static IPs with Secure Compute

If your project uses Secure Compute and you have enabled Static IPs, Static IPs will be ignored.

Getting started

Read our getting started guide to learn how to set up Static IPs.

How it works

When you enable Static IPs, you get:

• Shared infrastructure: Each VPC serves a small group of customers
• Static egress: All outbound traffic routes through shared static IP pairs
• Logical isolation: Subnet-level isolation maintains security between customers on the same VPC
• NAT gateway: Traffic exits through a managed NAT gateway for consistent IPs
• Build traffic: Traffic from both deployed functions and builds will route through the static IPs

Managing your static IPs

Routing build traffic

If your application calls data sources at build time, you can route its build traffic through your static IPs to keep your data sources secure.

To enable this, go to your project's networking settings:

1. Go to your project's Settings
2. Navigate to Networking
3. Toggle Use Static IPs for builds under Static IPs

This setting is disabled by default. When enabled, both your project's build and deployed function traffic will route through static IPs and count as Private Data Transfer.

Routing Middleware support

Static IPs (region-specific) don't apply to middleware (which are deployed at the edge).

Checking usage

1. Go to your Team and click the Usage tab
2. Scroll down to the Content, Caching & Optimization section. Static IPs data transfer is metered by Private Data Transfer
3. Click Private Data Transfer for more detail about direction, regions, and projects

Static IPs with deployment environments

When you configure static IPs in a project, they apply to all the environments set up in this project.

Regional considerations

• Choose regions close to your backend services to reduce latency
• Each configured region has its own static IP pair

Limits and pricing

Limits

• Static IP addresses are shared across a small group of customers in the same region
• Project-level configuration: You cannot isolate static IPs to specific deployment environments
• Static IPs do not support the extended max duration beta, large functions beta or container images beta. See Vercel Functions limits for current limits and compatibility

Pricing

Static IPs are priced at $100/month per project for Pro plus Private Data Transfer priced regionally based on regional pricing documentation.

Last updated June 30, 2026