Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add changes for Azure Outgoing IPs #4199

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
114 changes: 99 additions & 15 deletions sites/platform/src/development/regions.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@ You can choose a region based on criteria such as its closeness to your users an

{{< note title="Upcoming changes!" theme="info" >}}

There are upcoming changes that will affect **outbound IPs** for all GCP regions that will require your intervention
There are upcoming changes that will affect **outbound IPs** for all GCP and Azure regions that will require your intervention
if your are using public IP addresses explicitly.

Please see [the documentation](#upcoming-changes) below for details and relevant deadlines.
Expand All @@ -21,8 +21,8 @@ Please see [the documentation](#upcoming-changes) below for details and relevant

## Environmental impact

At {{% vendor/name %}}, we are committed to reducing our environmental impact. Whenever you create a project with us, we provide information about the electricity grid provider for that region. You can view the average carbon intensity of the energy grid in grams of CO2 equivalent per kilowatt-hour.
These data are sourced from an annual average, which we update as new information becomes available. If you want to see real-time emissions generated by each power grid, we recommend checking out [Electricity Maps](https://app.electricitymap.org/map). You can also access a public GitHub page of Electricity Maps [data sources](https://github.com/electricitymap/electricitymap-contrib/blob/master/DATA_SOURCES.md).
At {{% vendor/name %}}, we are committed to reducing our environmental impact. Whenever you create a project with us, we provide information about the electricity grid provider for that region. You can view the average carbon intensity of the energy grid in grams of CO2 equivalent per kilowatt-hour.
These data are sourced from an annual average, which we update as new information becomes available. If you want to see real-time emissions generated by each power grid, we recommend checking out [Electricity Maps](https://app.electricitymap.org/map). You can also access a public GitHub page of Electricity Maps [data sources](https://github.com/electricitymap/electricitymap-contrib/blob/master/DATA_SOURCES.md).

Summary of data being used in {{% vendor/name %}}’s Region Picker when creating a new Project:
| Source | Last update of this page | Previous versions of this page |
Expand Down Expand Up @@ -83,20 +83,20 @@ In such cases, add the inbound IP addresses for your region to your allow list.

## Upcoming changes

### GCP region outbound IPs
### GCP and Azure regions outbound IPs

Outbound IPs on **all GCP regions** will change.
Customer projects that refer to outbound IPs explicitly in their code and/or configuration must intervene and update to the **New outbound IPs** as soon as is possible.
Outbound IPs on **all GCP and Azure regions** will change.
Customer projects that refer to outbound IPs explicitly in their code and/or configuration must intervene and update to the **New outbound IPs** as soon as is possible.

Note, it's not yet possible for you to update to the new outbound IPs.
They are documented here to provide adequate time for affected customers to make the necessary updates.
They are documented here to provide adequate time for affected customers to make the necessary updates.

{{% vendor/name %}} will update this page and make an announcement when the new outbound IPs become available,
and the final deadline - after which the **Old outbound IPs** will no longer be available.
{{% vendor/name %}} will update this page and make an announcement when the new outbound IPs become available,
and the final deadline - after which the **Old outbound IPs** will no longer be available.

Please stay tuned for more details.
Please stay tuned for more details.

<!-- On the Xxx the outbound IPs of the GCP regions will changed, please update any configuration before that date. -->
<!-- On the Xxx the outbound IPs of the GCP and Azure regions will changed, please update any configuration before that date. -->

<table class="table-auto text-center" style="max-width: calc(100vw - 2rem);">
<tbody>
Expand Down Expand Up @@ -210,36 +210,117 @@ Please stay tuned for more details.
</ul>
</td>
</tr>
<tr class="flex wrap flex-col mb-6 border-t border-slate md:table-row [&>td]:align-middle [&_ul]:!my-2">
<!-- Region overview -->
<td class="relative block md:table-cell py-4 px-2 bg-stone">
<span class="md:hidden z-10 absolute rounded tx-sm top-0 left-0 p-2 bg-skye-light">Region</span>
<h4 class="font-black !text-2xl !mt-4">France (fr-4)</h4>
<code class="!bg-snow">fr-4.platform.sh</code>
</td>
<!-- Old Outbound ips -->
<td class="relative block md:table-cell p-6 pt-10 z-10 bg-snow">
<span class="md:hidden z-10 absolute rounded tx-sm top-0 left-0 p-2 bg-skye-light">Outbound ips</span>
<ul style="list-style: none;">
<li>20.74.41.190</li>
<li>20.74.41.218</li>
<li>20.74.42.30</li>
</ul>
</td>
<!-- New Outbound ips -->
<td class="relative block md:table-cell p-6 pt-10 z-10 bg-snow">
<span class="md:hidden z-10 absolute rounded tx-sm top-0 left-0 p-2 bg-skye-light">Outbound ips</span>
<ul style="list-style: none;">
<li>20.188.46.156</li>
<li>20.188.46.158</li>
<li>20.188.46.165</li>
</ul>
</td>
</tr>
<tr class="flex wrap flex-col mb-6 border-t border-slate md:table-row [&>td]:align-middle [&_ul]:!my-2">
<!-- Region overview -->
<td class="relative block md:table-cell py-4 px-2 bg-stone">
<span class="md:hidden z-10 absolute rounded tx-sm top-0 left-0 p-2 bg-skye-light">Region</span>
<h4 class="font-black !text-2xl !mt-4">West (us-3)</h4>
<code class="!bg-snow">us-3.platform.sh</code>
</td>
<!-- Old Outbound ips -->
<td class="relative block md:table-cell p-6 pt-10 z-10 bg-snow">
<span class="md:hidden z-10 absolute rounded tx-sm top-0 left-0 p-2 bg-skye-light">Outbound ips</span>
<ul style="list-style: none;">
<li>52.137.90.183</li>
<li>52.156.93.30</li>
<li>51.143.107.76</li>
</ul>
</td>
<!-- New Outbound ips -->
<td class="relative block md:table-cell p-6 pt-10 z-10 bg-snow">
<span class="md:hidden z-10 absolute rounded tx-sm top-0 left-0 p-2 bg-skye-light">Outbound ips</span>
<ul style="list-style: none;">
<li>52.148.128.255</li>
<li>52.250.13.106</li>
<li>40.91.69.215</li>
</ul>
</td>
</tr>
<tr class="flex wrap flex-col mb-6 border-t border-slate md:table-row [&>td]:align-middle [&_ul]:!my-2">
<!-- Region overview -->
<td class="relative block md:table-cell py-4 px-2 bg-stone">
<span class="md:hidden z-10 absolute rounded tx-sm top-0 left-0 p-2 bg-skye-light">Region</span>
<h4 class="font-black !text-2xl !mt-4">Australia (au-2)</h4>
<code class="!bg-snow">au-2.platform.sh</code>
</td>
<!-- Old Outbound ips -->
<td class="relative block md:table-cell p-6 pt-10 z-10 bg-snow">
<span class="md:hidden z-10 absolute rounded tx-sm top-0 left-0 p-2 bg-skye-light">Outbound ips</span>
<ul style="list-style: none;">
<li>20.92.240.74</li>
<li>20.191.224.199</li>
<li>20.92.240.236</li>
</ul>
</td>
<!-- New Outbound ips -->
<td class="relative block md:table-cell p-6 pt-10 z-10 bg-snow">
<span class="md:hidden z-10 absolute rounded tx-sm top-0 left-0 p-2 bg-skye-light">Outbound ips</span>
<ul style="list-style: none;">
<li>104.210.116.116</li>
<li>40.126.245.226</li>
<li>104.210.117.92</li>
</ul>
</td>
</tr>
</tbody>
</table>

#### How to audit the potential impact on an organization

You can determine which of your project are potentially impacted by this change via the CLI or the Console.
You can determine which of your project are potentially impacted by this change via the CLI or the Console.

{{< codetabs >}}

+++
title=Using the CLI
+++

For a given organization {{< variable "ORG_NAME" >}}, run the following command:
For a given organization {{< variable "ORG_NAME" >}}, run the following command:

```bash {location="Terminal"}
{{% vendor/cli %}} project:list -o {{< variable "ORG_NAME" >}} --region={{< variable "REGION" >}}
```

Where {{< variable "REGION" >}} is one of the impacted GCP regions:
Where {{< variable "REGION" >}} is one of the impacted regions:

- `ch-1.{{% vendor/urlraw "host" %}}`
- `uk-1.{{% vendor/urlraw "host" %}}`
- `de-2.{{% vendor/urlraw "host" %}}`
- `us-4.{{% vendor/urlraw "host" %}}`
- `fr-4.{{% vendor/urlraw "host" %}}`
- `us-3.{{% vendor/urlraw "host" %}}`
- `au-2.{{% vendor/urlraw "host" %}}`

There is a community-maintained [Region auditing snippet](https://github.com/platformsh/snippets/blob/main/src/region-audit.sh) you can use for this case:

```bash
curl -s https://raw.githubusercontent.com/platformsh/snippets/region-audit/src/region-audit.sh | bash -s -- {{< variable "ORG_NAME" >}} ch-1,uk-1,de-2,us-4 {{< vendor/cli >}}
curl -s https://raw.githubusercontent.com/platformsh/snippets/region-audit/src/region-audit.sh | bash -s -- {{< variable "ORG_NAME" >}} ch-1,uk-1,de-2,us-4,fr-4,us-3,au-2 {{< vendor/cli >}}
```

<--->
Expand All @@ -256,6 +337,9 @@ title=In the Console
- Switzerland (ch-1)
- United Kingdom (uk-1)
- United States - East (us-4)
- France (fr-4)
- United States - West (us-3)
- Australia - East (au-2)

![Console filter GCP IP changes](/images/gcpaffected.png "0.40")

Expand Down
Loading
Loading