I'm currently using firebase hosting with my default domain.
Is there a way to check if the IP address associated with this domain is a static IP address?
thank you very much.
I looked up her IP on an IP address lookup service and it pointed to the same her IP address for several days.
I checked the firebase hosting reference, but there was no explanation about the default domain.
* https://firebase.google.com/docs/hosting
Edit: #pregum_fox (the OP) added in the comments below that when they contacted Firebase Support directly, the team confirmed that all *.web.app and *.firebaseapp.com domains will resolve to the same IP address - which at the time of writing is 199.36.158.100, a Fastly edge server. Custom domains will use a different edge server identified in the Firebase Console.
Original content:
If it's not documented, it likely isn't - or at least, is not guaranteed to be.
The only time an IP address linked with your Firebase Hosting site should not change (without being advised), is when you've connected it to a custom domain. This is because the IP address you register as the A record for your custom domain must remain the same to work properly. If it changed often, using a custom DNS would be pointless.
Related
Some of my projects in my firebase account are blocked by ip address in my country. I guess thats was happened, in case of blocking some google resources that uses same ip address. For now, i have website in my firebase account: oneday.tv. Its domain name has ping for: 199.36.158.100. I can access to it only through vpn. Some projects in same firebase account works ok, because they has different ip. In firebase support told me, that it's the reason of government decision. Can i change ip address for existing projects in my firebase console or google cloud console? Even if i tried to create brand new firebase project, its gets this ip address 199.36.158.100. May be there is a way to get another ip address for new project?
Unfortunately no. The reason you are getting the same IP address is that address is the Google Frontend's IP address. You cannot change that.
You would need to switch to a service that supports external IP addresses such as Compute Engine. However, you cannot select a specific address, just the one Google selects from an available address pool, so it is a coin toss if that address would be blocked.
I'm developing an integration with an API which requires to whitelist customers based on IP addresses. I can easily get outbound IP from Production environments such as Azure or AWS and get those whitelisted.
How can I configure it for my desktop whose public IP keeps on changing after every few hours?
Getting a fixed IP address for your home computer is dependant on your internet provider. Sometimes they offer fixed IPs for 'Business' customers only or such.
Another solution might be to stand up an OpenVPN instance in your cloud then only whitelist that IP address and your expected partner prod addresses. Then you just connect to your VPN to access your API, you can do this from anywhere as your only dependant on the IP address of the cloud OpenVPN instance.
This solution also scales with your development as you only need to add new OpenVPN users to let other developers work with you and don't need their ever changing IP addresses.
I found an easy solution from NordVPN. It has an option to get a dedicated IP VPN :)
I have a hardcoded DDNS URL in an application that I can no longer modify the code for. It currently points to a server using its IP address and I'm trying to move over to Firebase.
My problem is that I need to update the DDNS URL with an IP address but I've only got a hosting URL like https://myapp-123q4.firebaseapp.com/.
My understanding is (from this Google Groups post) that because the entire system is shared, there are some specific IP addresses that can be used. Is there any way to access my own firebase hosting URL using an IP address?
(Pinging my firebase URL gave me the IP 151.101.1.195 which is one of the ones mentioned on the above linked post.)
You should not depend on direct IP addresses for accessing Firebase Hosting. There are simply not enough IPv4 addresses available for everyone to have exclusive access to one. You need to use the host name in the HTTP request so that the server can route the request to the correct content.
We would like to use the Google Translate API from a host which doesn't have open access to the Internet. To setup the firewall rules I would need the list of possible IP addresses for www.googleapis.com. It is resolved to different IP addresses depending on the location. It seems to be difficult to create a future proof firewall rule.
Do you know how could I get the list of IP addresses or network ranges for the Google API servers?
The IP addresses used for any given googleapis.com server could change. Google doesn't have just one network block which they host all of their content out of, they have a bunch of them - and they change over time.
There are several ways you could setup your restricted network to allow access to *.googleapis.com without hard-coding IP addresses. I don't know anything about your setup, but I've found that using an internal proxy is often the best bet when you want to allow/restrict access to a domain.
This evening I noticed a brute force attack attempt from the same IP address on several of our websites hosted on the same IP address. The attempt was to exploit a bunch of php-related vulnerabilities.
As I get notifications on all of these, I simply added the incoming IP address in IIS Manager/IP Address and Domain Restrictions - set to deny, then left it.
No more notifications, so I figured everything was good.
Later when I attempted to access any of our websites, I got a 403 access denied error from any IP address I tried to access these sites from. I do have one site that I have explicit allow rules set for other IP addresses, which I was able to access, however all the other sites do not have this special rule.
To get all the sites working again, I added an Allow rule where I added an IP address range is the web server's IP address, and Mask or Prefix = "(1)".
Here are the settings in IP Address and Domain Restrictions:
Mode: Allow
Requestor: ([my server's IP address])(1)
Entry Type: Local
So what I'd like to know is why this is now allowing access to the rest of my sites. Did I mistakenly delete a value that should have been there before?
From what I read here, By default, domain name restrictions are disabled.