Loading Profile...
Apigee Server IPs
i want to only allow requests from apigee to my api by building a firewall rule. So i need to know from which ip subnet the requests are coming. Can u tell me which ips your servers have?
1
person has this question
I have this question, too!
Tell me when someone answers.
The more people who ask this question, the more it gets noticed.
The more people who ask this question, the more it gets noticed.
The company marked this question as answered.
-
Inappropriate?Matthias, that's a fantastic question. We'll get you a list of IP's as soon as we confirm them.
But your post got me thinking, as new IPs come online from time to time, and old IPs could be deprecated. At the very least it needs to be documented (FAQ perhaps). We're even considering how we might use Apigee's API to indicate current IP ranges, as well as to list what IPs are marked for deprecation or coming online. We could also set up a mailing list.
If you have any input about what you'd like, by all means let us know. -
Inappropriate?the easiest way would be to just publish the right subnet(s)
for example: 188.96.0.0/12
so we could use that for our firewall rules and you can change your server ips as much as u like :) -
Inappropriate?Matthias, the current Apigee IPs are 174.129.236.240 and 75.101.150.28.
Do you think you would ever use an Apigee API method to auto-update your rules? Would pushing the IP change notices to Twitter be of any use to you? -
Inappropriate?hmm....is there any standard protocol to do so!? there are millions of different firewalls out there...and not everbody is able to get script access to his firewall (imagine hosted scenarios).
the subnet way is the easiest and most used for such cases!1 Comment
Add a comment
This answers the question
-
Re subnet: Apigee is a highly available service, so we worry about and plan for failure at the data center (and above). The only way to mitigate that kind of problem is to distribute our servers, which means that a single subnet isn't possible.
But you make some good points (and it's always a pleasure to hear your perspective, Matthias), and you've raised an important provider use-case (firewall configuration) that we'll keep considering how to address as we continue to grow. In the meantime, the two IPs listed above are what you need.
Cheers, Marsh -
Inappropriate?Re subnet: it would totally be ok to have more then one subnet!
i already configured the IPs :)
I’m thankful
EMPLOYEE
