Azure public IPs for all Azure clouds are available for anyone, even those without an Azure Cloud subscription ... but only via interactive download: https://www.microsoft.com/en-US/download/details.aspx?id=56519 . There is an Azure Service Tag Discovery API endpoint to get some Azure public IPs. However, there are two critical blockers to that List endpoint being useful. Based on the documentation the API is four weeks stale as compared with the downloadable JSON. Based on the endpoint documentation the API requires subscription to four clouds for information that is available in the downloaded JSON with access to zero Azure clouds. We'd even be OK with API access from MSFT Azure Public being required if that meant we got Azure IP ranges from all four clouds. As a result, the API endpoint has low value due to being stale and incomplete. Is there another option for getting Azure public IPs for all Azure clouds with at most one week of staleness, just like what is done for the downloadable JSON?

Up-to-date Azure Public API to get Azure IP ranges in all Azure Clouds?

Syed Ashrafulla 0

Azure public IPs for all Azure clouds are available for anyone, even those without an Azure Cloud subscription ... but only via interactive download: https://www.microsoft.com/en-US/download/details.aspx?id=56519.

There is an Azure Service Tag Discovery API endpoint to get some Azure public IPs. However, there are two critical blockers to that List endpoint being useful.

Based on the documentation the API is four weeks stale as compared with the downloadable JSON.
Based on the endpoint documentation the API requires subscription to four clouds for information that is available in the downloaded JSON with access to zero Azure clouds. We'd even be OK with API access from MSFT Azure Public being required if that meant we got Azure IP ranges from all four clouds.

As a result, the API endpoint has low value due to being stale and incomplete. Is there another option for getting Azure public IPs for all Azure clouds with at most one week of staleness, just like what is done for the downloadable JSON?

Syed Ashrafulla 0 Reputation points

2023-10-31T03:23:10.8066667+00:00

Note that it is undesirable AFAICT to programmatically download the downloadable JSON because "Your current User-Agent string appears to be from an automated process, if this is incorrect, please click this link ..."
KapilAnanth-MSFT 41,566 Reputation points Microsoft Employee

2023-11-01T08:03:59.56+00:00
@Syed Ashrafulla

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

I understand that you are looking to programmatically download the Azure Service Range IP Address prefixes.

In case you are planning to use Service Tag Discovery API,

You will require a subscription and have a role with read permissions for your that subscription.

And the requests should be authenticated.

And the IP ranges will be with respect to the cloud you are using

With Downloadable JSON,

You have to interactively download the JSON File

You can directly curl the URL of the Download link, but yes, this has the risk of the URL changing.

One way to monitor if the file version has changed is to leverage the filename in the site

I understand, downloading the Azure Public IP Prefix JSON File programmatically without a subscription is currently not feasible.

If you wish you may vote in Azure Feedback Hub forum requesting this feature.

All the feedback shared in these forums are monitored and reviewed by the Microsoft engineering teams responsible for building Azure

Cheers,

Kapil
Syed Ashrafulla 0 Reputation points

2023-11-01T19:01:01.3566667+00:00

@KapilAnanth-MSFT Thanks for the thorough answer. I was about to write a new feature but I see that the feature request was made three years ago with no traction. Should I make a new feature request? I worry that whoever is reading feature requests will not be incentivized to care about three-year-old feature requests.
KapilAnanth-MSFT 41,566 Reputation points Microsoft Employee

2023-11-02T08:40:52.3133333+00:00

@Syed Ashrafulla

That is unfortunate.

I see you have added a comment and upvoted for this feature as well.

I have reached out to the Product Team internally on this. Should there be an update, I shall post it here.

Cheers,

Kapil

Share via

Up-to-date Azure Public API to get Azure IP ranges in all Azure Clouds?