3

We are using an Azure CDN with pricing tier Standard Microsoft. It's using our site as a "custom origin" so we need to make sure that the CDN server has access to this site.

My question is: what are the IP addresses that this CDN server could use? (And therefore, we should add to our whitelist.)

I have found this link, but it applies only to Verizon servers, not to "Standard Microsoft" servers: https://learn.microsoft.com/en-us/azure/cdn/cdn-pop-list-api

I also found this list of Microsoft Azure Datacenter IP Ranges, but it doesn't seem to be the appropriate list either: https://www.microsoft.com/en-us/download/confirmation.aspx?id=41653

A third thing that we tried, is using Azure's "Service Tag" source with "AzureCloud.WestEurope" in our NSG, but this doesn't seem to work either.

Peter M.
  • 1,240
  • 2
  • 9
  • 25

3 Answers3

3

Azure CDN from Microsoft's IPv4 backend IP space: 147.243.0.0/16

https://learn.microsoft.com/en-us/azure/cdn/cdn-pop-list-api

Taras Kolodchyn
  • 49
  • 3
  • Excellent! The CIDR appears to work with the 'Standard Microsoft' SKU, even thought the link talks about the Verizon SKUs. – Stringfellow Oct 16 '20 at 22:11
1

Update

Unfortunately, Azure CDN from Standard Microsoft has not disclosed the POP IP address, currently. It seems that POP location gradually expands more regions. Refer to this blog. These POP edge sites location is not exactly the same as the Azure datacenter location.

enter image description here

If you want to improve this, you could request your feedback or upvote this. Alternatively, you also could create an Azure support request.

Nancy
  • 26,865
  • 3
  • 18
  • 34
  • The "Azure CDN for Microsoft" link only shows IP addresses for Verizon servers. We are using "Standard Microsoft" so this list doesn't apply. The "Azure datacenter IP" list could theoretically apply, but it seems it doesn't. From a test with temporarily disabling our IP whitelisting, I found that the IP address 147.243.66.234 was used by the Azure CDN. This is not in any of the ranges mentioned in the "Azure datacenter IP" list. – Peter M. Mar 07 '19 at 12:30
  • 1
    Thanks for the info and the useful links! Apart from the suggestion link that you mentioned, I also added this suggestion: https://feedback.azure.com/forums/169397-cdn/suggestions/37051585-publicize-the-ip-addresses-of-microsoft-cdn-server – Peter M. Mar 08 '19 at 08:18
  • gladly help. :) – Nancy Mar 08 '19 at 08:20
0

Nope, that's not available yet. Only Verizon and Akami were the old CDN providers and they are available. For the latest updates, I would recommend opening a support ticket with our Microsoft Azure Storage and CDN team. They will have a crisp answer and about it's availability.

Capt. Cherry ex- MSFT
  • 61
  • 1