title: How to determine cloud composer ip address or ip address range?
body: <p>I'm using Google Cloud Composer and just set up a new MySQL connection in order for Airflow to connect and query my external database hosted on a separate Ubuntu server. In order to get this working, I had to create a firewall rule on my database server that allows all connections on the port I specified in the Airflow connection.</p>
  <p>In order to make things more secure I was hoping to specify an IP address in the firewall rule so that only Cloud Composer's IP address (or range) would be allowed to connect to the specified port.</p>
  <p>Can anybody instruct me how to set this up? Do I need to assign a static IP address to the Cloud Composer setup, or is it already set up that way by default?</p>
  <p>Are there any other recommended ways to make this setup secure? Currently the only &quot;security&quot; is that the mysql username and password is unique and only used by this Cloud Composer connection. Should I be doing something with ssl or ssh instead? I'm a networking novice so any help is much appreciated.</p>