Source IP address(es) for fetch API

8 views

Skip to first unread message

David Poblador Garcia

unread,

Sep 30, 2008, 3:35:28 AM9/30/08

to Google App Engine

Hi all,

I'm trying to use an external HTTP service with the Fetch API from the
AppEngine. I'm wondering if there is any way to know which IP
address(es) Google is using for the fetch infrastructure. I'd like to
know that in order to block non-trustable IP addresses in the remote
HTTP RPC.

Thanks for your help,

David

David Symonds

unread,

Sep 30, 2008, 4:49:57 AM9/30/08

to google-a...@googlegroups.com

On Tue, Sep 30, 2008 at 5:35 PM, David Poblador Garcia
<da...@poblador.com> wrote:

> I'm trying to use an external HTTP service with the Fetch API from the
> AppEngine. I'm wondering if there is any way to know which IP
> address(es) Google is using for the fetch infrastructure. I'd like to
> know that in order to block non-trustable IP addresses in the remote
> HTTP RPC.

I don't think there will ever be any IP address guarantees that Google
will give you for that.

Using trusted IPs for cross-Internet traffic went out of vogue in the
80s, and is woefully insecure. You'd probably find it (a) more secure
and (b) more reliable to just send a secret token along with the
fetch.