Public IP Range for Compute Instances on Azure

Question

Hi, where can I find the IP address range for Compute (Virtual Machine) instances in Azure cloud? I have looked at the public IP ranges https://www.microsoft.com/en-us/download/details.aspx?id=56519 but there is no specific service tag just for the instances. The range in AzureCloud service tag is very wide and encompasses all public IPs and I am looking for something narrower - IPs just used by the instances.

I am trying to build an external service that would allow network access to the Azure compute instances alone and dont want to provide access to the entire list of public IPs.

Answer 1

Hi,

I've not seen anything like that documented.

One thing to consider is, what precisely do you mean by "public IP range for compute instances"? A VM can use a public IP via default outbound access or NAT Gateway or Azure Firewall or load balancer or direct association or (something I'm forgetting). And if the IP is associated with VM's interface it could be MS public IP or customer public IP (aka bring-your-own-IP).

Further, VM instances are used by a ton of different Azure services under the covers. Which of these should be included/excluded? One example, there are different services whereby you set the parameters (size, quantity, scaling, etc.) for the VMs that make up a cluster. Should the public IPs that these VMs use be included/excluded?

You may want to instead consider only whitelisting specific IPs based on requests by your customers.

Please click Accept Answer and upvote if the above was helpful.

Thanks.

-TP