ConnectManage connections

Connect through SSH

View as MarkdownOpen in Claude

Sigma supports connecting through Secure Shell (SSH) for PostgreSQL, Redshift, AlloyDB, and MySQL connections.

The SSH protocol is a secure remote shell protocol, where clients and servers communicate on a secure channel. It has three layers:

Transport layerSecures communication between the server and the client, monitors data encryption and decryption, protects the integrity of the connection, caches data, and performs data compression.
Authentication layerPerforms client authentication at the beginning of each session.
Connection layerManages communication channels after successful authentication.

SSH channels use public key cryptography to authenticate the client. After establishing the connection, SSH encrypts information to safely exchange it between the server and the client. This provides the data security that is independent of the particular network infrastructure.

Requirements

  • You must be assigned the Admin account type.
  • A PostgreSQL, Redshift, AlloyDB or MySQL database.

SSH server parameters

To enable SSH connections, send the following Sigma information to your system admin.

Public key

Download

ssh-rsa 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 info@sigmacomputing.com

User

sigmacomputing

Sigma IP addresses

Sigma’s egress IP addresses are listed on all individual connection pages in the Sigma Administration portal.

Get Sigma IPs

Follow these steps to get Sigma IPs from the app:

  1. Open your Admin Portal to the Connection page.
  2. Select any connection, or click Create Connection.
  3. Look for the IP addresses under connection credentials.

Connect to Sigma through SSH

  1. Download or save Sigma’s SSH public key.
  2. Add Sigma IPs to your allowlist.
  3. Create an SSH user account, and name it sigmacomputing.
    The user sigmacomputing authenticates through the public key.
  4. Authorize Sigma’s public key according to the instructions of your SSH server.
  5. For most servers, the SSH default port is 22. It is also the default port on Sigma.
    Check that the port on your SSH server matches the port on Sigma.
  6. In Sigma, navigate to your connection’s page in the Admin Portal.

    1. Under Connection Credentials, switch on the SSH Tunnel. Set these parameters:

      Tunnel hostThis is your IP address.
      Tunnel port

      This value must match the port of your SSH server.

      Sigma’s defaults to port 22, which is common for most servers.

      SSH tunnel configuration

  7. If you are editing an existing connection, click Save.
    If you are creating a new connection, continue specifying the Connection features, Write access, and so on.