Google CDN ip-range

Stevo Novkovski

unread,

Jun 14, 2016, 9:14:02 PM6/14/16

to gce-discussion

Hello,

How we can white-list google CDN in our backend?

There is no ip-range list.

George (Google Cloud Support)

unread,

Jun 15, 2016, 10:42:13 AM6/15/16

to gce-discussion

Hello Stevo,

Google Cloud Platform uses a large range of IP addresses, which change over time. For historical reasons, Google Cloud Platform publishes its list of public IP addresses in an SPF record for _cloud-netblocks.googleusercontent.com.

When you need the literal IP addresses for Google Cloud Platform, use one of the common DNS lookup commands (nslookup, dig, host) to retrieve the TXT records for the domain _cloud-netblocks.googleusercontent.com:


$ nslookup -q=TXT _cloud-netblocks.googleusercontent.com  8.8.8.8

This returns a list of the domains included in Google's SPF record, such as:

_cloud-netblocks1.googleusercontent.com, _cloud-netblocks2.googleusercontent.com, _cloud-netblocks3.googleusercontent.com

Next, look up the DNS records associated with those domains, one at a time:


$ nslookup -q=TXT _cloud-netblocks1.googleusercontent.com 8.8.8.8


$ nslookup -q=TXT _cloud-netblocks2.googleusercontent.com 8.8.8.8


$ nslookup -q=TXT _cloud-netblocks3.googleusercontent.com 8.8.8.8

The results of these commands contain the current range of addresses.

I hope this helps.

Sincerely,

George

Stevo Novkovski

unread,

Jun 15, 2016, 11:13:37 AM6/15/16

to gce-discussion

Nice!

Does this results are very up to date?

George (Google Cloud Support)

unread,

Jun 15, 2016, 4:54:46 PM6/15/16

to gce-discussion

Hello Stevo,

The results are from the Public DNS servers. So as long as the DNS is up to date the results should be up to date as well.

I hope this helps.

Sincerely,

George

Reply all

Reply to author

Forward