Fixed Southbound IP address for IP whitelisting

Not applicable

Getting conflicting information regarding fixed southbound IP adresses:

Searching in forums, answers from support and users claim that there are no guarantees that southbound IP addresses remain static over time.

If you google for it, you'll find the following marketing specification from apigee which claims that southbound ip is static, and not subject to variation depending on level of support and entitlement plan:

So which one is it?

https://apigee.com/about/sites/mktg-new/files/spec-sheets/ApigeeEdgeCloud_May2017_0.pdf

Key Features

Apigee Edge Cloud provides:

● API runtime that includes:

...

○ Fixed Southbound IP address for IP whitelisting <-- no asterisk

...

* Entitled capabilities may vary depending on level of support and entitlement plan purchased.

0 3 1,988
3 REPLIES 3

The Southbound (outbound) requests go through a NAT layer.

There is a small set of addresses. N=3 (usually).

Each address is generally static, and also, the list sometimes (quite rarely) changes.

What are you trying to do?

It's for last mile security. But I think it'd be a better solution to set up client TLS terminating in a reverse nginx/haproxy in front of the target proxy. Are there any specific references for this kind of solution?