Whitelisting an application hosted in Google app engine

[Sanooj KS]

hi ,

We do have an application hosted in google app engine . Another application is asking for IP ranges to whitelist our application . I believe we don't have a static ip range in app engine . So what is the recommended way to achieve it?

Regards

Sanooj

[Nicola Spreafico]

Hi,

please note the due to App Engine nature, there is no a single IPs.

There is a way to retrieve the interval of App Engine IPs, but is not recommended.

https://cloud.google.com/appengine/kb/

Look for the section "Static IP Addresses and App Engine apps"

--
You received this message because you are subscribed to the Google Groups "Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-appengi...@googlegroups.com.
To post to this group, send email to google-a...@googlegroups.com.
Visit this group at https://groups.google.com/group/google-appengine.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/c5704a40-ab3a-4451-8a45-a54d35cb3b75%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--

Nicola Spreafico

Software Engineer - Cloud Development - Noovle S.r.l.
tel. +39 02 89053350 | mob. +39 348 2861626  | mail: nicola.s...@noovle.com

________ 

 | The Nexus of forces

_______________________________________________________

Stampare questa e-mail danneggia l'ambiente.

[Sanooj KS]

Agree that there is no static IPs or Not recommended . Question is what is the recommended way for whitelisting applications hosted in app engine?

Regards

Sanooj

On Wed, May 16, 2018 at 12:43 PM, 'Nicola Spreafico' via Google App Engine <google-a...@googlegroups.com> wrote:

Hi,

please note the due to App Engine nature, there is no a single IPs.

There is a way to retrieve the interval of App Engine IPs, but is not recommended.

https://cloud.google.com/appengine/kb/

Look for the section "Static IP Addresses and App Engine apps"

Il giorno mer 16 mag 2018 alle ore 18:35 Sanooj KS <sano...@gmail.com> ha scritto:

hi ,

We do have an application hosted in google app engine . Another application is asking for IP ranges to whitelist our application . I believe we don't have a static ip range in app engine . So what is the recommended way to achieve it?

Regards

Sanooj

--
You received this message because you are subscribed to the Google Groups "Google App Engine" group.

To unsubscribe from this group and stop receiving emails from it, send an email to google-appengine+unsubscribe@googlegroups.com.
To post to this group, send email to google-appengine@googlegroups.com.

Visit this group at https://groups.google.com/group/google-appengine.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/c5704a40-ab3a-4451-8a45-a54d35cb3b75%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--

Nicola Spreafico

Software Engineer - Cloud Development - Noovle S.r.l.

tel. +39 02 89053350 | mob. +39 348 2861626  | mail: nicola.spreafico@noovle.com

________ 

 | The Nexus of forces

_______________________________________________________

Stampare questa e-mail danneggia l'ambiente.

--

You received this message because you are subscribed to the Google Groups "Google App Engine" group.

To unsubscribe from this group and stop receiving emails from it, send an email to google-appengine+unsubscribe@googlegroups.com.
To post to this group, send email to google-appengine@googlegroups.com.

Visit this group at https://groups.google.com/group/google-appengine.

To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/CAN93Wr2xQY9maU0m7HZHriVNU3FemE3HOUAex8wBoKMUVCMkNQ%40mail.gmail.com.

[Kenworth (Google Cloud Platform)]

+1 on Nicola's answer.

App Engine will make outgoing HTTP requests from a subset of the addresses returned by the TXT record _cloud-netblocks.googleusercontent.com. Note that these can change at any time, so you can't simply fetch the list as it stands now and assume that will continue to be the case.

IP-based authentication is a poor choice here, as you will open yourself up to access by any App Engine application. Instead, you should implement a proper authentication system and use that instead of relying on IP ranges for your security. See original post.