Would like to know how to get the public IP of an Outsystems ODC Cloud environment. It is not the same as Outsystems 11 where I can go to service center to check.
Currently I only have the Domain name.
Hi @Lawrence Arielle Batuhan - With ODC, no static IP addresses are used by the applications. The applications can automatically scale up and also automatically failover, so we are using dynamic IP addresses for the containers. Whitelisting ODC using IP Addresses is not possible nor recommended.
If you want to have your applications call internal API's you will need to use the Private Gateway feature to securely connect your applications to private resources, such as DB's or APi's that are behind a firewall.
Hi Dan,
Unfortunately due to security concerns and company policies we are unable to use this Private Gateway approach.
Hi Lawrence,
I would be happy to chat with you on this if you want to contact us directly. I am interested to know what concerns you or your security team would have from using Private Gateways.
The feature is designed to ensure all communication is secure, as well as ensure that no endpoints are public, and even isolates communication from your apps in OutSystems to only the internal endpoints that you specify.
The solution is also Open Source so your security team can review the code if needed, and it would provide you more granular control than simply whitelisting IP addresses.
Hi,
Why do you need a public IP address?
One difference with ODC compared to O11 is that it does not run in a VPC especially setup for you, so I wonder how useful it is to figure out the public IP.
Regards,
Daniel
Hello @Daniel Kuhlmann ,
The reason to get the public ip is when you for example need to be whitelisted on IP on a API call or you want to send mails by an MX-Relay that can only be used by a IP adres that is whitelisted.
@Lawrence Arielle Batuhan i created a API endpoint (in O11) which is returning the calling IP adres. But I don't know (yet) if a new container will spawn up the IP adres remains the same. At the moment I have a case at OutSystems about this. Will keep you informed if I get info. The problem is that our customer want to use a MX-Relay on base of IP whitelisting.
Hi Robert,
You're correct. We need to call an internal API that is not exposed to the internet at the moment. Hence we are asking for this information. Once we have the public IP, we can then use it to whitelist from our end so it will not block our call. But unfortunately we already raised a ticket for this and Outsystems is unable to provide what we needed.
Their workaround to install a connector tool is not allowed due to our company policies so we skipped it.
We also cannot whitelist via DNS.
Thanks for the context Robert, I will ask OutSystems.