# Dedicated IP

> Give a server one fixed IP address with the standard ports 22 and 21, for partners and firewalls that need an allowlist.

Updated 2026-10-22

By default every server shares its region's host (for example `nbg1.cloudfile.dev`) and has its own high ports, such as `22000` for SFTP. That works with any client that lets you set a port.

Some partners can't: older ERP and EDI systems often assume port 22 or 21, and corporate firewalls only let traffic out to addresses on an allowlist. A **dedicated IP** solves both. It's included on the Pro and Business plans.

## What you get

- **Ports 22 (SFTP) and 21 (FTP/FTPS)** on an IP address only this server uses.
- **Its own host name**, such as `acme-prod-1a2b.nbg1.cloudfile.dev`, with a trusted certificate for FTPS.
- **One fixed address** to give partners for their firewall rules. It stays the same for as long as the setting is on.

The shared host and the high ports keep working, so existing clients don't need to change anything.

## Turning it on

Open the server's **Settings** tab and switch on **Use a dedicated IP**. Setup takes a minute or two. When it's done, the host, IP and ports show on the **Overview** tab.

```bash
sftp acme@acme-prod-1a2b.nbg1.cloudfile.dev
```

For FTPS, connect to the same host on port 21 with **explicit FTP over TLS**. The certificate for the new host name can take a few minutes to appear. Until then FTPS clients may warn that the certificate is for the region's host.

## Your own domain

With the dedicated IP on, you can let clients connect to a name of your own, such as `files.acme.com`. It's included on the Pro and Business plans.

1. On the **Settings** tab, under **Dedicated IP**, enter the domain and click **Save**.
2. At your DNS provider, add the record shown there:
   - a **CNAME** from `files.acme.com` to the server's host name (for example `acme-prod-1a2b.nbg1.cloudfile.dev`), or
   - an **A record** to the dedicated IP, if you can't use a CNAME (for example for `acme.com` itself).
3. We check DNS automatically: within a minute at first, then less often, for up to 48 hours. Click **Check now** to check right away after adding the record.

Once the domain is active, the **Overview** tab shows it as the host, and FTPS presents a certificate issued for your domain. SFTP works as soon as DNS points at the IP.

The FTPS certificate then matches your domain only. Clients that still connect to our host name on port 21 get a certificate warning, so switch them over to your domain.

## Turning it off

Switch it off on the **Settings** tab. Clients using the dedicated host, your own domain or ports 22/21 stop connecting, the custom domain is removed, and the address goes back to the pool. If you turn it on again later, you'll most likely get a different IP.