MS Azure应用服务出站IP地址多久可以更改一次？ [英] How often can MS Azure App Services Outbound IP addresses change?

问题描述

我正在使用Azure App Services调用外部API，该API使用白名单IP地址进行纵深防御保护。

I'm using Azure App Services that calls an external API that uses white-listing of IP addresses for defense-in-depth protection.

我知道我可以在WebApp - >设置 - >属性 - >出站IP地址下找到我的应用服务的出站IP地址（显示4的列表）逗号分隔的IP地址），可以提供给外部API白名单。据我所知，Microsoft发布了一个定期更新的Azure数据中心IP地址列表，用于我可以列入白名单的出站流量： https://www.microsoft.com/en-us/download/details.aspx?id=41653

I'm aware I can find my Outbound IP addresses of my App Services under the WebApp -> Settings -> Properties -> Outbound IP addresses (showing a list of 4 comma separated IP addresses) which can be supplied to the external API whitelist. I understand Microsoft publishes a regularly updated list of Azure datacenter's IP addresses for outbound traffic that I can whitelist: https://www.microsoft.com/en-us/download/details.aspx?id=41653

问题外部API只能处理多个IP地址，而不能处理Azure数据中心IP的完整列表。仅提供4个以逗号分隔的IP地址是否安全？有关IP地址动态更改频率或时间的明确Microsoft文档吗？

The issue is the external API can only handle a number of IP addresses and not the full list of Azure datacenter IP's. Would it be safe to just provide the 4 comma separated IP addresses? Is there clear Microsoft documentation on how often or when the IP address can dynamically change?

我试图找到答案并找到两个外部网站，表明它只会在移动Azure区域[参考2]时更改，或者如果您向上/向下扩展（但是缩小/缩小显然很好）[参考1]。这是正确的信息吗？

I have tried to look for the answer and found two external sites that suggested it only changes when moving Azure regions [Ref 2] or if you scale up/down (but scale out/in is apparently fine) [Ref 1]. Is this correct information?

在我的情况下，Azure应用服务环境是唯一可行的替代方案吗？

Is the Azure App Services Environment the only other viable alternative in my situation?

推荐答案

除了上述有关更改的资源之外，另一个原因是可能会添加额外的IP以容纳出站n / w呼叫的额外容量。
需要注意的具体注释是随着最近的升级，网站服务有一组稳定的出站IP地址分配给每个比例单位。我们继续监控网络利用率，我们可能会添加（但从不删除）额外的IP地址。作者：Stefan_MS

In addition to above resources about changes the other thing is that additional IP's might be added to accommodate additional capacity for outbound n/w calls. Specific comment to look out for is "With the recent upgrades the Websites service has a stable set of outbound IP addresses allocated to each of its scale units. We continue to monitor network utilization and we might add (though never remove) additional IP addresses." by Stefan_MS

https://social.msdn.microsoft.com/Forums/azure/ en-US / fd53afb7-14b8-41ca-bfcb-305bdeea413e / maintenance-notice-coming-changes-to-increase-capacity-forbound-network-calls？forum = windowsazurewebsitespreview

这篇关于MS Azure应用服务出站IP地址多久可以更改一次？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！