Drains Security
All Drains support transport-level encryption using HTTPS protocol.
When your server starts receiving payloads, a third party could send data to your server if it knows the URL. Therefore, you should verify the request is coming from Vercel.
Vercel sends an header with each drain, which is a hash of the payload body created using your Drain signature secret. You can find or update this secret by clicking Edit in the Drains list.
To verify the request is coming from Vercel, you can generate the hash and compare it with the header value as shown below:
For additional authentication or identification purposes, you can also add custom headers when configuring the Drain destination
Managing IP address visibility is available on Enterprise and Pro plans
Those with the owner, admin role can access this feature
Drains can include public IP addresses in the data, which may be considered personal information under certain data protection laws. To hide IP addresses in your drains:
- Go to the Vercel dashboard and ensure your team is selected in the scope selector
- Go to the Settings tab and navigate to Security & Privacy
- Under IP Address Visibility, toggle the switch off so the text reads IP addresses are hidden in your Drains
This setting is applied team-wide across all projects and drains.
For more information on Drains security and how to use them, check out the following resources:
Was this helpful?