Skip to content

enumerating deprecated infrastructure IP space #67

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Mar 3, 2017

Conversation

mabrown-corp
Copy link
Contributor

This is an enumeration of all of the deprecated Fastly anycast or
site-specific IPs which may have ever been exposed (via DNS maps) or used for
GitHub user pages.

This commit also removes a single IP (45.32.88.68) which is not a Fastly IP
and appears to be assigned to Choopa / Vultr Holdings (as of 2017-03-03, this
is originated in 45.32.64.0/19 by AS 20473.)

This is an enumeration of all of the deprecated Fastly anycast or
site-specific IPs which may have ever been exposed (via DNS maps) or used for
GitHub user pages.

This commit also removes a single IP (45.32.88.68) which is not a Fastly IP
and appears to be assigned to Choopa / Vultr Holdings (as of 2017-03-03, this
is originated in 45.32.64.0/19 by AS 20473.)
@mabrown-corp
Copy link
Contributor Author

Greetings Ben et alia,

Please let me know if there are other documentation details you would like me to submit along with the included set of IPs in this pull request.

-Martin

@aspires
Copy link

aspires commented Mar 3, 2017

cc @benbalter @parkr

@benbalter
Copy link
Contributor

benbalter commented Mar 3, 2017

@mabrown-corp This is awesome (and extremely helpful).

One question: Now that the list has grown, would it be more efficient to store these IPs in CIDR notation?

@mabrown-corp
Copy link
Contributor Author

Perhaps it would be more efficient if you have hundreds or thousands more to add to the LEGACY_IP_ADDRESSES data structure, but this is not a terribly long list, so I'm not unduly worried about it myself. (I confess I don't know Ruby, nor have I studied exactly how you are using the IPs in this list, so I may not be the best judge here.)

@mabrown-corp
Copy link
Contributor Author

So, an alternate option for restructuring is to remove everything except 151.101.0.0/16 (in use) and 199.232.0.0/16 (planned) from the file config/fastly-ips.txt. Those two /16s are prefixes devoted to providing services to HTTP/HTTPS requesters.

We use the other prefixes for a variety of different purposes (origin pull, DNS, peering ....) so they are included in our public-ip-list ( https://api.fastly.com/public-ip-list ).

@benbalter
Copy link
Contributor

but this is not a terribly long list, so I'm not unduly worried about it myself

Makes sense. Assumed you'd know the IP space better so and figured I'd ask. Will get this merged and out into production. Thanks for the PR. 🎉

@benbalter benbalter merged commit 1b1209f into github:master Mar 3, 2017
"23.235.46.133",
"23.235.47.133",
"45.32.88.68",
"23.235.47.133",
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

seems to be duplicate.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants