SOLVED

Our Azure Service IP address is changed Suddenly.

%3CLINGO-SUB%20id%3D%22lingo-sub-141498%22%20slang%3D%22en-US%22%3EOur%20Azure%20Service%20IP%20address%20is%20changed%20Suddenly.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-141498%22%20slang%3D%22en-US%22%3E%3CP%3EOur%20Azure%20Service%20IP%20address%20is%20changed%20Suddenly.%20We%20don't%20want%20to%20get%20new%20IP%20address%20and%20want%20back%20the%20original%20IP%20because%20changing%20IP%20address%20will%20give%20us%20a%20lot%20of%20troubles.%20We%20have%20to%20change%20our%20serving%20clients'%20connection%20string%20one%20by%20one.%20is%20there%20any%20way%20we%20can%20get%20back%20the%20Original%20IP%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-141498%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-141551%22%20slang%3D%22en-US%22%3ERe%3A%20Our%20Azure%20Service%20IP%20address%20is%20changed%20Suddenly.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-141551%22%20slang%3D%22en-US%22%3E%3CP%3E%3CFONT%20face%3D%22Arial%22%20size%3D%222%22%3EIf%20you%20are%20building%20web%20based%20applications%20hosted%20on%20Azure%20Web%20Apps%20(App%20Services)%20and%20require%20static%20outbound%20IP%20addresses%20then%20the%20following%20details%20will%20help%20you.%20%3CBR%20%2F%3EWhen%20provisioning%20Azure%20Web%20Apps%20(Azure%20App%20Services)%2C%20a%20pool%20of%20IP%20addresses%20are%20allocated%20to%20the%20underlying%20scale%20unit%20of%20the%20web%20app%20and%20from%20what%20I%20have%20found%20the%20outbound%20IP%20addresses%20wont%20change%20if%20you%20stop%2Fstart%20the%20site%20or%20change%20to%20a%20different%20app%20service%20hosting%20plan%20(%3CEM%3Eat%20least%20in%20my%20testing%3C%2FEM%3E).%20%3CBR%20%2F%3EAlso%20the%20App%20Service%20and%20App%20service%20plan%20have%20to%20be%20in%20the%20same%20region%2C%20you%20cannot%20move%20to%20a%20different%20app%20service%20plan%20located%20in%20a%20different%20region%2C%20the%20App%20service%20and%20plan%20both%20have%20to%20be%20in%20the%20same%20Azure%20region.%20%3CBR%20%2F%3EThe%20outbound%20IP%20addresses%20will%20be%20released%20back%20into%20the%20global%20address%20pool%20when%20the%20web%20app%20is%20deleted.%20When%20redeployed%20a%20new%20range%20of%20IP%20addresses%20will%20be%20allocated%20for%20you%20from%20the%20available%20pool.%3CBR%20%2F%3EAlso%20currently%20the%20only%20way%20to%20have%20a%20fixed%20IP%20for%20inbound%20traffic%20is%20via%20an%20internal%20IP%20with%20a%20web%20app%20hosted%20in%20an%20Application%20Service%20Environment%20(But%20that%E2%80%99s%20for%20another%20post).%20For%20now%20you%20access%20a%20web%20app%20via%20a%20load%20balanced%20endpoint%20such%20as%20%26lt%3B%3CMYSITE%3E%26gt%3B.azurewebsites.net.%20%3CBR%20%2F%3EHaving%20fixed%20outbound%20IPs%20is%20very%20useful%20if%20you%20need%20to%20add%20a%20range%20of%20IPs%20to%20a%20whitelist%20for%20firewall%20rules%20and%20intra-service%20communication%20and%20the%20like.%20%3C%2FMYSITE%3E%3C%2FFONT%3E%3CFONT%20face%3D%22Arial%22%20size%3D%222%22%3ETo%20find%20the%20outbound%20IP%20addresses%20for%20a%20given%20Web%20app%2C%20follow%20the%20steps%20below%3A%3CBR%20%2F%3E1)%20First%20select%20and%20click%20on%20the%20web%20app%3A%20%3CBR%20%2F%3E%3C%2FFONT%3E%3CIMG%20src%3D%22http%3A%2F%2Fassets.aaronsaikovski.com%2Fimages%2Fwebapp1.JPG%22%20border%3D%220%22%20%2F%3E%3CBR%20%2F%3E%3CFONT%20face%3D%22Arial%22%20size%3D%222%22%3E2)%20Scroll%20down%20and%20then%20select%20the%20properties%20section%20from%20the%20properties%20blade%3A%3C%2FFONT%3E%3CBR%20%2F%3E%3CIMG%20src%3D%22http%3A%2F%2Fassets.aaronsaikovski.com%2Fimages%2Fwebapp2.JPG%22%20border%3D%220%22%20%2F%3E%3CBR%20%2F%3E%3CFONT%20face%3D%22Arial%22%20size%3D%222%22%3E3)%20The%20outbound%20IP%20addresses%20will%20be%20shown%20as%20per%20the%20diagram%3A%3C%2FFONT%3E%3CIMG%20src%3D%22http%3A%2F%2Fassets.aaronsaikovski.com%2Fimages%2Fwebapp3.JPG%22%20border%3D%220%22%20%2F%3E%20%3CBR%20%2F%3E%3C%2FP%3E%0A%3CP%3E%3CFONT%20face%3D%22Arial%22%20size%3D%222%22%3EAlso%20I%20have%20spoken%20to%20some%20folks%20from%20Microsoft%20about%20this%20and%20here%20is%20a%20summary%20of%20what%20they%20told%20me%3A%20%3CBR%20%2F%3E1)%20Static%20outbound%20addresses%20associated%20with%20a%20scale%20unit%20do%20not%20change%20unless%20Microsoft%20makes%20a%20specific%20change%20to%20them.%20%3CBR%20%2F%3E2)%20Microsoft%20will%20also%20provide%20around%2090%20days%20notice%20if%20the%20IP%20addressed%20were%20to%20change%20on%20the%20backend.%20%3CBR%20%2F%3E3)%20Typically%20there%20is%20a%20fixed%20pool%20of%20about%204%20or%205%20outbound%20IP%20addresses%20per%20underlying%20scale%20unit.%20%3CBR%20%2F%3E4)%20The%20pool%20of%20addresses%20wont%20change%20without%20further%20advanced%20notification.%20%3C%2FFONT%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-141514%22%20slang%3D%22en-US%22%3ERe%3A%20Our%20Azure%20Service%20IP%20address%20is%20changed%20Suddenly.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-141514%22%20slang%3D%22en-US%22%3E%3CP%3EHello%20May%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EWas%20IP%20Set%20to%20static%20or%20a%20reserved%20IP%3F%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIf%20the%20IP%20Address%20was%20not%20set%20to%20static%20or%20reserved%20there%20is%20no%20way%20to%20get%20it%20back.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-778916%22%20slang%3D%22en-US%22%3ERe%3A%20Our%20Azure%20Service%20IP%20address%20is%20changed%20Suddenly.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-778916%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F34745%22%20target%3D%22_blank%22%3E%40Sameer%20Salunke%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20for%20the%20information%2C%20very%20helpful.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20just%20encountered%20also%20that%20the%20outbound%20IP%20address%20changed.%20We%20would%20expect%20that%20the%20new%20outbound%20IP%20was%20one%20of%20the%20listed%20Outbound%20IP%20addresses%20specified%20on%20the%20Web%20App%20(listed%20in%20the%20Azure%20portal%2C%20Outbound%20IP%20Addresses).%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHowever%2C%20we%20found%20out%20that%20our%20new%20Outbound%20IP%20address%20on%20the%20Web%20App%20was%20not%20listed%20anywhere.%20(we%20needed%20to%20made%20a%20function%20in%20our%20Web%20App%20which%20calls%20an%20external%20API%2C%20which%20return%20the%20IP%20address%20of%20our%20Web%20App).%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAs%20far%20as%20we%20know%2C%20we%20were%20not%20informed%20in%20advance%20of%20the%20IP%20change%20(and%20that%20the%20new%20IP%20was%20not%20listed%20in%20the%20outbound%20IP%20addresses).%3C%2FP%3E%3CP%3EFor%20security%20reasons%2C%20I%20rather%20use%20the%20portal%20for%20this%20kind%20of%20security%20information%20exchange%20in%20stead%20of%20an%20email%20(with%20detailed%20IP%20numbers).%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDoes%20this%20make%20senses%20to%20you%20and%20did%20anyone%20else%20encounter%20the%20same%20problem%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

Our Azure Service IP address is changed Suddenly. We don't want to get new IP address and want back the original IP because changing IP address will give us a lot of troubles. We have to change our serving clients' connection string one by one. is there any way we can get back the Original IP?

3 Replies

Hello May,

 

Was IP Set to static or a reserved IP?

 

If the IP Address was not set to static or reserved there is no way to get it back. 

If you are building web based applications hosted on Azure Web Apps (App Services) and require static outbound IP addresses then the following details will help you.
When provisioning Azure Web Apps (Azure App Services), a pool of IP addresses are allocated to the underlying scale unit of the web app and from what I have found the outbound IP addresses wont change if you stop/start the site or change to a different app service hosting plan (at least in my testing).
Also the App Service and App service plan have to be in the same region, you cannot move to a different app service plan located in a different region, the App service and plan both have to be in the same Azure region.
The outbound IP addresses will be released back into the global address pool when the web app is deleted. When redeployed a new range of IP addresses will be allocated for you from the available pool.
Also currently the only way to have a fixed IP for inbound traffic is via an internal IP with a web app hosted in an Application Service Environment (But that’s for another post). For now you access a web app via a load balanced endpoint such as <<mysite>>.azurewebsites.net.
Having fixed outbound IPs is very useful if you need to add a range of IPs to a whitelist for firewall rules and intra-service communication and the like.
To find the outbound IP addresses for a given Web app, follow the steps below:
1) First select and click on the web app:

2) Scroll down and then select the properties section from the properties blade:

3) The outbound IP addresses will be shown as per the diagram:

Also I have spoken to some folks from Microsoft about this and here is a summary of what they told me:
1) Static outbound addresses associated with a scale unit do not change unless Microsoft makes a specific change to them.
2) Microsoft will also provide around 90 days notice if the IP addressed were to change on the backend.
3) Typically there is a fixed pool of about 4 or 5 outbound IP addresses per underlying scale unit.
4) The pool of addresses wont change without further advanced notification.

Best Response confirmed by may zin (New Contributor)
Solution

@Sameer Salunke 

 

Thank for the information, very helpful.

 

We just encountered also that the outbound IP address changed. We would expect that the new outbound IP was one of the listed Outbound IP addresses specified on the Web App (listed in the Azure portal, Outbound IP Addresses).

 

However, we found out that our new Outbound IP address on the Web App was not listed anywhere. (we needed to made a function in our Web App which calls an external API, which return the IP address of our Web App).

 

As far as we know, we were not informed in advance of the IP change (and that the new IP was not listed in the outbound IP addresses).

For security reasons, I rather use the portal for this kind of security information exchange in stead of an email (with detailed IP numbers). 

 

Does this make senses to you and did anyone else encounter the same problem?