Documentation +

Static IP guide

Connecting to Postgres with a static IP from a Node app on Render

A Node service on Render talking to an external allowlisted Postgres database can go fully in-code: socksjs opens the connection through Fixie Socks and pg rides on top as a custom stream. Unlike serverless platforms, Render services are long-running, so a Fixie-Wrench sidecar is an equally valid choice if you prefer zero driver changes.

RuntimeNode.js and JavaScript
PlatformRender
DestinationPostgres
Fixie productFixie Socks proxy

Recommended setup

Use Fixie Socks proxy for Postgres connections to a database that only accepts traffic from approved IP addresses. Store the proxy value in FIXIE_SOCKS_HOST, then configure Node.js to route outbound traffic through Fixie before connecting to Postgres.

Set up Fixie on Render

Create a Fixie Socks proxy in the Fixie dashboard. Copy the proxy value into Render Environment Variables as FIXIE_SOCKS_HOST, and copy the outbound IPs into the destination allowlist.

Implementation

The example below shows the core application-side change. Keep credentials in environment variables and avoid committing proxy, database, or API secrets.

Connect to Postgres through FIXIE_SOCKS_HOST

const pg = require('pg');
const SocksConnection = require('socksjs');

const fixieValues = process.env.FIXIE_SOCKS_HOST.split(new RegExp('[/(:\\/@)/]+'));

const databaseServer = {
  host: 'postgres.example.com',
  port: 5432,
};

const fixieConnection = new SocksConnection(databaseServer, {
  user: fixieValues[0],
  pass: fixieValues[1],
  host: fixieValues[2],
  port: fixieValues[3],
});

const client = new pg.Client({
  user: process.env.DB_USER,
  password: process.env.DB_PASSWORD,
  database: process.env.DB_NAME,
  stream: fixieConnection,
  ssl: true,
});

client.connect()
  .then(() => client.query('select 1 as ok'))
  .then((result) => console.log(result.rows[0]));

Good to know

  • If you hold connections open, send a periodic keepalive query to keep an idle tunnel connection from being recycled.
  • The sidecar variant works in the same container: prepend ./bin/fixie-wrench 5432:postgres.example.com:5432 & to your start command.

Allowlist and test the static IPs

  1. Open the Fixie dashboard and copy the outbound IP addresses for this proxy.
  2. Add both IPs to the Postgres firewall or security group.
  3. Deploy the updated Node.js app on Render.
  4. Run a small connection test before sending production traffic.

Related guides

Related docs

Is this guide useful?