We’re renaming ‘products’ to ‘apps’

Atlassian 'products’ are now ‘apps’. You may see both terms used across our documentation as we roll out this terminology change. Here’s why we’re making this change

What are application tunnels?

Who can do this?
Role: Organization admin
Atlassian Cloud: All plans
Atlassian Government Cloud: Not available

Application tunnels provide a secure pathway between your Atlassian cloud organization and Data Center instances that live in your network. This pathway can be used to integrate your instances through application links that would otherwise require allowing incoming connections to your network. Thanks to network tunneling, you can integrate your Atlassian instances and exchange data and functionalities between them in a secure way, without exposing your network or allowlisting any incoming connections or IPs.

How it works

Here you can see how an application tunnel and links using it integrate your instances:

Diagram showing how application tunnels connect your Atlassian cloud and self-managed products.
  1. Tunnel server: You access it from admin.atlassian.com where you create a tunnel.

  2. Tunnel client: Installed as a Marketplace app in your Data Center instance.

  3. Application link (cloud): You create a tunneled application link in each of your Atlassian cloud apps and point it at an existing tunnel. You can link multiple cloud apps to a single tunnel. The application link must always be created on the cloud side.

  4. Application link (self-managed): The reciprocal link will be automatically created in your Data Center instance. Only incoming connections to your network use the tunnel, the outgoing ones will reach your Atlassian cloud apps directly.

Supported Atlassian apps and products

The following cloud apps and Data Center products support application tunnels:

Cloud apps

  • Jira

  • Jira Service Management

  • Confluence

Data Center products

  • Jira Core / Software 8.8 or later

  • Jira Service Management 4.8 or later

  • Confluence 7.4 or later

  • Bitbucket 6.9 or later

  • Bamboo 9.3 or later

Security

To learn more about the security, see Application tunnel security.

Limitations

In Atlassian Cloud, different cloud apps live within organizations. For example, you can have an organization with Jira Cloud, Confluence Cloud, and Bitbucket Cloud. You could also have multiple organizations, but they would be separated from each other, and therefore have separate Application tunnels.

You can link only one such organization (and its multiple cloud apps) to a single Data Center instance, for example Confluence Data Center. That’s because your Confluence Data Center can receive only one tunnel. Linking multiple separate organizations to the same Data Center product isn’t supported. Watch the feature request

Available features

When integrating Cloud and Data Center instances, there will be some differences in feature you might know from your current integrations. For more info on available integrations and feature differences, see Integrate Atlassian cloud and self-managed instances.

Get started with application tunnels

To get started, see Configure application tunnels.

Still need help?

The Atlassian Community is here for you.