app engine traffic IPs & Hostnames

[Pavel Sokolovsky]

One of my sites has seen a significant amount of traffic from four IPs owned by Google. The hostnames all resolve to D.C.B.A.bc.googleusercontent.com (where d.c.b.a. is the ip address backwards). I suspect this traffic is from an app running on google app engine, rather than google itself. Can anyone confirm what IP/Hostname traffic running on app engine comes from? Does it fit this model?

[Barry Hunter]

It could also be Compute Engine. 

In general AppEngine have UrlFetch, which clearly identifies Apps in the User-Agent. 

But there is Socket API which makes direct http requests possible. Not sure if the Compute and App engine can be clearly seperated from the IP. 

.. but the googleusercontent.com does pretty much its a 'cloud customer' rather than Google. Proper Googlebot is clearly identified in the reverse DNS lookup. 

On 3 February 2015 at 20:42, Pavel Sokolovsky <psok...@gmail.com> wrote:

One of my sites has seen a significant amount of traffic from four IPs owned by Google. The hostnames all resolve to D.C.B.A.bc.googleusercontent.com (where d.c.b.a. is the ip address backwards). I suspect this traffic is from an app running on google app engine, rather than google itself. Can anyone confirm what IP/Hostname traffic running on app engine comes from? Does it fit this model?

--
You received this message because you are subscribed to the Google Groups "Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-appengi...@googlegroups.com.
To post to this group, send email to google-a...@googlegroups.com.
Visit this group at http://groups.google.com/group/google-appengine.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/89af9c01-4a2a-4eeb-9aa7-3d38fb5dfdcb%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[camaram]

To add something more on this. 'googleusercontent.com' domain is used for any customer originated traffic from within the Google Infrastructure. This includes both Google App Engine and Google Compute Engine.

In addition to what Barry said, if the requests were made by URLFetch, there should be an "X-Appengine-Inbound-Appid" header [1] that identifies the requesting GAE App.

[1] https://cloud.google.com/appengine/docs/python/appidentity/#Python_Asserting_identity_to_other_App_Engine_apps

[Pavel Sokolovsky]

Thanks for the insight guys, it's very helpful!

[Vinny P]

On Wed, Feb 11, 2015 at 9:27 AM, camaram <cam...@google.com> wrote:

To add something more on this. 'googleusercontent.com' domain is used for any customer originated traffic from within the Google Infrastructure. This includes both Google App Engine and Google Compute Engine.

Emphasizing the above. Googleusercontent is not just Google cloud platform services, but also Apps Scripts (a GApps service) and also (at least it used to) originates traffic from Google docs (for instance, if you embed another site's pictures within a document).

You'll want to look closely at the User-Agent header in addition to X-Appengine-Inbound-Appid header. 

 

 

-----------------

-Vinny P

Technology & Media Consultant

Chicago, IL

App Engine Code Samples: http://www.learntogoogleit.com