Client Considerations

Snowflake clients (SnowSQL, JDBC driver, ODBC driver, etc.) allow you to access data in Snowflake by connecting directly through the client, or by developing programs in programming languages such as Python and JavaScript.

This topic describes information common across all clients, such as limits and configuration information.

In this Topic:

Hostname Whitelisting

All Snowflake clients (SnowSQL, JDBC driver, ODBC driver, etc.) require temporary access to cloud storage (AWS S3, Google Cloud Storage, or Microsoft Azure), as well as other web-based hosts, to perform various runtime operations. To ensure access, particularly in a secure/private network (e.g. AWS PrivateLink-enabled network), you must whitelist the hostnames for the required hosts.

The hostnames that need to be whitelisted depend on your cloud platform (AWS or Azure) and the region where your Snowflake account is located. The following sections list the hostname patterns to whitelist per cloud and region.

Note

If you wish to whitelist specific hostnames instead of patterns, use the SYSTEM$WHITELIST function to obtain the hostnames for your Snowflake account.

Snowflake on Amazon AWS

Regions

Hostname Patterns

Usage

All AWS regions

sfc-*-stage.s3.amazonaws.com:443

Required for temporary cloud storage.

All AWS regions

sfc-snowsql-updates.s3.us-west-2.amazonaws.com:443

Required for SnowSQL auto-upgrade.

All AWS regions

ocsp.snowflakecomputing.com:80 . *.ss2.us:80 . *.amazontrust.com:80 . *.digicert.com:80

Required for OCSP validation.

All AWS regions, except US East

sfc-*-stage.s3-<region_id>.amazonaws.com:443 . sfc-*-stage.s3.<region_id>.amazonaws.com:443

Required for temporary cloud storage. Note the hyphen (-) and period (.) in front of the <region_id> segment.

AWS US West only

*.netsolssl.com:80 . *.usertrust.com:80

Required for OCSP validation.

For more details about OCSP, see the documentation for each client.

Snowflake on Microsoft Azure

Regions

Hostname Patterns

Notes

All Azure regions

*.blob.core.windows.net:443

Required for temporary cloud storage.

All Azure regions

sfc-snowsql-updates.s3.us-west-2.amazonaws.com:443

Required for SnowSQL auto-upgrade. Note that this AWS S3 host is required even with the Azure cloud platform.

All Azure regions

ocsp.snowflakecomputing.com:80 . *.digicert.com:80 . *.msocsp.com:80

Required for OCSP valiation.

For more details about OCSP, see the documentation for each client.

Limits on Query Text Size

Snowflake limits the size of query text (i.e. SQL statements) submitted through Snowflake clients to 1 MB per statement.

This limit includes any literals, such as string literals or binary literals, that are part of the statement, whether as part of a WHERE clause, SET clause (in an UPDATE statement), etc.

Some Snowflake data types support data longer than 1 MB (e.g. VARCHAR supports up to 16 MB). To load data that exceeds the 1 MB limit, load from data files as described in Loading Data into Snowflake.