Microsoft SQL Server Connector

Zwiron supports Microsoft SQL Server 2016+ (and Azure SQL Database) as both a source and destination, with CDC via SQL Server’s built-in Change Data Capture feature.

Connection details

Field	Description
Host	Hostname or IP of your SQL Server instance
Port	Default: `1433`
Database	The database name
Username	SQL Server login
Password	Login password
Instance	Named instance (optional, e.g. `SQLEXPRESS`)
Encrypt	Enable TLS encryption (`true` recommended)

Permissions

Source (read-only)

CREATE LOGIN zwiron WITH PASSWORD = 'your_password';
CREATE USER zwiron FOR LOGIN zwiron;
GRANT SELECT ON SCHEMA::dbo TO zwiron;

Destination (read-write)

GRANT SELECT, INSERT, UPDATE, DELETE, ALTER ON SCHEMA::dbo TO zwiron;

CDC

CDC must be enabled at the database and table level:

-- Enable CDC on the database
EXEC sys.sp_cdc_enable_db;

-- Enable CDC on each table
EXEC sys.sp_cdc_enable_table
  @source_schema = 'dbo',
  @source_name   = 'your_table',
  @role_name     = NULL;

-- Grant CDC read access
GRANT SELECT ON SCHEMA::cdc TO zwiron;

Supported sync modes: Full Refresh ✅ | Incremental ✅ | CDC ✅

Azure SQL Database

When connecting to Azure SQL Database (hostnames ending in .database.windows.net), you must whitelist the IP address that will make the connection before it can be established. Azure’s firewall silently drops packets from non-whitelisted addresses, which causes the test connection to hang and time out.

Which IP do I whitelist?

This depends on which execution mode you are using: Agent mode (self-hosted agent) The connection originates from the machine where your Zwiron agent is installed. Find its public IP by running this on the agent machine:

curl -s https://ifconfig.me

Whitelist that IP in your database’s firewall rules. Hosted mode (no agent) The connection originates from Zwiron’s cloud servers. Whitelist all of Zwiron’s static egress IPs — every unique HA address, not just one.

Whitelisting your agent’s IP (Agent mode)

Find your agent machine’s public IP:
curl -s https://ifconfig.me
In the Azure Portal, open your SQL server (not the database).
Go to Security → Networking.
Under Firewall rules, click Add a firewall rule.
Enter the IP address from step 1.
Click Save.

Common error: connection timed out

If you see “The connection timed out” or “Connection failed” during the test, the most likely cause is a missing firewall rule. Add your agent’s IP as described above and retry.

Last modified on September 4, 2026

Getting Started

Guides

Core Concepts

Pipelines

Connectors

Platform

Support

Microsoft SQL Server Connector

Connection details

Permissions

Source (read-only)

Destination (read-write)

CDC

Azure SQL Database

Which IP do I whitelist?

Whitelisting your agent’s IP (Agent mode)

Common error: connection timed out

​Connection details

​Permissions

​Source (read-only)

​Destination (read-write)

​CDC

​Azure SQL Database

​Which IP do I whitelist?

​Whitelisting your agent’s IP (Agent mode)

​Common error: connection timed out

Connection details

Permissions

Source (read-only)

Destination (read-write)

CDC

Azure SQL Database

Which IP do I whitelist?

Whitelisting your agent’s IP (Agent mode)

Common error: connection timed out