locked
Maintenance Notice: Upcoming Changes to Increase Capacity for Outbound Network Calls

    General discussion

  • Due to the rapid growth of Azure Websites, the number of outbound network calls made by customers' web sites to external services and endpoints has been steadily increasing.  In order to accommodate this growth, the Azure Websites service will be making periodic network changes to increase capacity for making outbound network calls.

    ***UPDATE***

    From July 20th, 2015 onwards, this post will no longer be updated with IP addresses.  Instead this information can now be found in a web app's properties using the new portal (portal.azure.com).  Details below.

    ***UPDATE***

    ***How to find outbound IP addresses using portal.azure.com***

    A recent update to the new Azure portal (portal.azure.com) includes the outbound IP addresses used by your web app. 

    To find the outbound IP addresses:

    1.  Browse to the details of your specific web app using the new portal at portal.azure.com.

    2.  Towards the top of the details for your web app, there is a link for "All settings".  Click the link.

    3.  Clicking "All settings" will open up a list of web app information that you can drill into further.  The specific information to drill into is "Properties".  Click on the "Properties" selection.

    4.  Within the "Properties" UX, there is a textbox showing the set of Outbound IP Addresses.  Using the icon to the side of the "Outbound IP Addresses" textbox you can select all of the addresses.  Pressing Ctrl+C will then copy the addresses to the clipboard.

    ***How to find outbound IP addresses using the portal.azure.com***

    ***How to lookup outbound IP addresses using Azure Resource Explorer***

    The following blog article describes how to use the Azure Resource Explorer to lookup outbound IP addresses for a web app:

    How to find out outbound IP addresses used by Azure Web App

    ***How to lookup outbound IP addresses using Azure Resource Explorer***

    A side effect of the changes is that the existing IP addresses used by Azure Websites when making outbound network calls will change.  Some customers may be using these IP addresses to whitelist access to external services.  As a result customers will need to re-configure IP address whitelists to include the new addresses (listed below) in advance of the planned service changes to Azure Websites in order to ensure un-interrupted connectivity to external services.  After the network upgrades are complete, old IP addresses can then be safely removed from address whitelists.

    Note:  outbound calls to Sql Azure are not affected by this change if you are using the blanket “allow all Azure services” Sql Azure firewall setting.

    Customers can determine which set of IP addresses to use from the information below by looking at the name of the region and the name of the scale unit.  You can determine the name of the scale unit for your website by looking in the Azure management portal at the FTP publishing hostname.

    For example, click on the Dashboard link in the Azure management portal:

    Dashboard link in Azure Management Portal

    On the right-hand side of the dashboard, scroll down and you will see the hostnames of the FTP publishing endpoints:

    Dashboard showing hostnames of FTP endpoints for a scale unit

    The publishing endpoint hostnames include the scale unit name.  For example from the picture above, the scale unit name for this web site is "waws-prod-blu-011".

    Please check back periodically for updates as new regions are updated and new IP address ranges become available.

    =======COMPLETED UPGRADES=========

    The scale units listed below have been upgraded.  Any of the IP addresses listed below can be used by a web site in the corresponding scale unit when making outbound network calls.

    Brazil South Region:

    Scale Unit Name: waws-prod-cq1-001
     Outbound IP Addresses:
     23.97.97.220
     23.97.102.22
     23.97.102.53
     23.97.99.175

    Scale Unit Name: waws-prod-cq1-003
      Outbound IP Addresses:
    104.41.9.254
    104.41.13.4
    104.41.15.87
    104.41.14.246

    North Europe Region:

    Scale Unit Name: waws-prod-db3-001
    Outbound IP Addresses:
    94.245.88.135
    94.245.88.217
    94.245.88.231
    94.245.88.250

    Scale Unit Name: waws-prod-db3-003
    Outbound IP Addresses:
    137.135.128.56
    137.135.128.116
    137.135.129.178
    137.135.130.121

    Scale Unit Name: waws-prod-db3-005
    Outbound IP Addresses:
    191.235.161.78
    191.235.161.110
    191.235.161.117
    191.235.161.5

    Scale Unit Name: waws-prod-db3-007
    Outbound IP Addresses:
    191.235.176.126
    191.235.176.213
    191.235.176.215
    191.235.176.55

    Scale Unit Name: waws-prod-db3-009
    Outbound IP Addresses:
    137.135.129.245
    137.135.129.246
    137.135.129.252
    137.135.130.16

    Scale Unit Name: waws-prod-db3-011
    Outbound IP Addresses:
    191.235.217.28
    191.235.220.16
    191.235.220.26
    191.235.209.127

    Scale Unit Name: waws-prod-db3-013
    Outbound IP Addresses:
    23.100.53.139
    23.100.53.152
    23.100.53.156
    23.100.58.69

    Scale Unit Name: waws-prod-db3-015
    Outbound IP Addresses:
    23.101.63.203
    23.101.63.36
    23.101.63.218
    23.101.63.220

    Scale Unit Name: waws-prod-db3-017
    Outbound IP Addresses:
    104.45.94.1
    104.45.94.30
    104.45.92.250
    104.45.94.74

    Scale Unit Name: waws-prod-db3-019
    Outbound IP Addresses:
    191.235.176.14
    191.235.176.15
    191.235.176.16
    191.235.176.17

    Scale Unit Name: waws-prod-db3-021
    Outbound IP Addresses:
    104.45.95.84
    104.45.82.120
    104.45.83.43
    104.45.86.180

    Scale Unit Name: waws-prod-db3-023
    Outbound IP Addresses:
    23.102.49.127
    191.237.221.134
    191.237.217.25
    191.237.217.20

    Scale Unit Name: waws-prod-db3-025
    Outbound IP Addresses:
    23.102.60.92
    23.102.57.130
    23.102.53.200
    23.102.50.240

    Scale Unit Name: waws-prod-db3-027
    Outbound IP Addresses:
    23.102.18.78
    23.102.19.80
    23.102.17.117
    23.102.19.146

    Scale Unit Name: waws-prod-db3-029
    Outbound IP Addresses:
    23.102.13.103
    23.102.11.221
    23.102.12.241
    23.102.8.249

    West Europe Region:

    Scale Unit Name: waws-prod-am2-001
    Outbound IP Addresses:
    65.52.136.102
    65.52.137.91
    65.52.137.92
    65.52.136.29

    Scale Unit Name: waws-prod-am2-003
    Outbound IP Addresses:
    137.117.228.149
    137.117.228.150
    137.117.228.217
    137.117.225.138

    Scale Unit Name: waws-prod-am2-005
    Outbound IP Addresses:
    137.117.224.241
    137.117.225.112
    137.117.225.168
    137.117.227.185

    Scale Unit Name: waws-prod-am2-007
    Outbound IP Addresses:
    23.97.163.47
    23.97.163.156
    23.97.163.227
    23.97.163.3

    Scale Unit Name: waws-prod-am2-009
    Outbound IP Addresses:
    23.97.163.248
    23.97.164.1
    23.97.164.29
    23.97.162.60

    Scale Unit Name: waws-prod-am2-011
    Outbound IP Addresses:
    23.97.209.229
    23.97.210.39
    23.97.210.106
    23.97.211.140

    Scale Unit Name: waws-prod-am2-013
    Outbound IP Addresses:
    23.97.230.36
    23.97.231.138
    23.97.231.170
    23.97.225.177

    Scale Unit Name: waws-prod-am2-015
    Outbound IP Addresses:
    23.100.12.200
    23.100.11.108
    23.100.12.194
    23.100.9.143

    Scale Unit Name: waws-prod-am2-017
    Outbound IP Addresses:
    23.101.66.96
    23.101.67.255
    23.101.68.0
    23.101.66.95

    Scale Unit Name: waws-prod-am2-019
    Outbound IP Addresses:
    104.45.14.250
    104.45.14.251
    104.45.14.252
    104.45.14.253

    Scale Unit Name: waws-prod-am2-021
    Outbound IP Addresses:
    104.40.129.119
    104.40.129.252
    104.40.130.52
    104.40.130.72

    Scale Unit Name: waws-prod-am2-023
    Outbound IP Addresses:
    191.233.81.170
    191.233.83.183
    191.233.80.64
    191.233.86.224

    Scale Unit Name: waws-prod-am2-025
    Outbound IP Addresses:
    104.40.213.115
    104.40.212.193
    104.40.210.85
    104.40.212.23

    Scale Unit Name: waws-prod-am2-027
    Outbound IP Addresses:
    104.40.179.31
    104.40.145.193
    104.40.145.253
    191.233.93.146

    Scale Unit Name: waws-prod-am2-029
    Outbound IP Addresses:
    191.233.82.110
    191.233.86.83
    191.233.80.234
    191.233.80.175

    Scale Unit Name: waws-prod-am2-031
    Outbound IP Addresses:
    104.46.59.103
    104.46.52.221
    104.46.52.73
    104.40.212.192

    Scale Unit Name: waws-prod-am2-033
    Outbound IP Addresses:
    23.97.196.83
    23.97.198.40
    23.97.192.185
    23.97.198.63

    Scale Unit Name: waws-prod-am2-035
    Outbound IP Addresses:
    191.233.83.169
    191.233.83.200
    191.233.80.134
    191.233.83.148

    Scale Unit Name: waws-prod-am2-037
    Outbound IP Addresses:
    104.47.150.114
    104.47.148.54
    104.47.149.26
    104.47.151.211

    West US Region:

    Scale Unit Name: waws-prod-bay-001
    Outbound IP Addresses:
    168.62.20.50
    168.62.20.54
    168.62.20.56
    168.62.16.187

    Scale Unit Name: waws-prod-bay-003
    Outbound IP Addresses:
    137.117.8.203
    137.117.9.62
    137.117.9.67
    137.117.11.51

    Scale Unit Name: waws-prod-bay-005
    Outbound IP Addresses:
    23.99.3.91
    23.99.3.100
    23.99.3.101
    23.99.3.151

    Scale Unit Name: waws-prod-bay-007
    Outbound IP Addresses:
    138.91.225.153
    138.91.226.7
    138.91.226.231
    138.91.226.57

    Scale Unit Name: waws-prod-bay-009
    Outbound IP Addresses:
    137.117.9.68
    137.117.9.69
    137.117.10.6
    137.117.12.16

    Scale Unit Name: waws-prod-bay-011
    Outbound IP Addresses:
    191.236.84.50
    191.236.84.239
    191.236.85.43
    191.236.84.216

    Scale Unit Name: waws-prod-bay-013
    Outbound IP Addresses:
    23.99.64.241
    23.99.66.100
    23.99.66.125
    23.99.64.42

    Scale Unit Name: waws-prod-bay-015
    Outbound IP Addresses:
    23.100.40.244
    23.100.40.246
    23.100.40.2
    23.100.32.186

    Scale Unit Name: waws-prod-bay-017
    Outbound IP Addresses:
    23.101.206.54
    23.101.194.183
    23.101.206.60
    23.101.205.197

    Scale Unit Name: waws-prod-bay-019
    Outbound IP Addresses:
    104.40.57.101
    104.40.82.23
    104.40.81.188
    104.40.85.254

    Scale Unit Name: waws-prod-bay-021
    Outbound IP Addresses:
    104.45.225.96
    104.45.229.87
    104.45.229.169
    104.45.233.233

    Scale Unit Name: waws-prod-bay-023
    Outbound IP Addresses:
    104.45.234.138
    104.45.229.200
    104.45.237.98
    104.45.233.99

    Scale Unit Name: waws-prod-bay-025
    Outbound IP Addresses:
    23.101.204.168
    23.101.207.119
    23.101.205.109
    23.101.198.154

    Scale Unit Name: waws-prod-bay-027
    Outbound IP Addresses:
    191.239.57.218
    191.239.58.113
    191.239.58.48
    191.239.60.207

    Scale Unit Name: waws-prod-bay-029
    Outbound IP Addresses:

    191.239.52.104
    191.239.49.193
    191.239.53.140
    191.239.50.228

    East US Region:

    Scale Unit Name: waws-prod-blu-001
    Outbound IP Addresses:
    168.62.48.13
    168.62.48.19
    168.62.48.33
    168.62.48.122

    Scale Unit Name: waws-prod-blu-003
    Outbound IP Addresses:
    137.117.81.128
    137.117.81.142
    137.117.81.181
    137.117.81.82

    Scale Unit Name: waws-prod-blu-005
    Outbound IP Addresses:
    137.117.80.189
    137.117.81.52
    137.117.81.90
    137.117.80.178

    Scale Unit Name: waws-prod-blu-007
    Outbound IP Addresses:
    23.96.33.205
    23.96.34.196
    23.96.35.20
    23.96.36.229

    Scale Unit Name: waws-prod-blu-009
    Outbound IP Addresses:
    23.96.97.203
    23.96.97.233
    23.96.97.235
    23.96.97.238

    Scale Unit Name: waws-prod-blu-011
    Outbound IP Addresses:
    23.96.112.60
    23.96.112.117
    23.96.112.152
    23.96.112.15

    Scale Unit Name: waws-prod-blu-013
    Outbound IP Addresses:
    191.238.8.154
    191.238.9.80
    191.238.9.94
    191.238.9.170

    Scale Unit Name: waws-prod-blu-015
    Outbound IP Addresses:
    191.236.19.222
    191.236.19.242
    191.236.21.165
    191.236.18.160

    Scale Unit Name: waws-prod-blu-017
    Outbound IP Addresses:
    191.238.32.104
    191.238.32.154
    191.238.34.67
    191.238.35.12

    Scale Unit Name: waws-prod-blu-019
    Outbound IP Addresses:
    104.45.138.197
    104.45.142.87
    104.45.128.144
    104.45.142.131

    Scale Unit Name: waws-prod-blu-021
    Outbound IP Addresses:
    191.237.24.189
    191.237.30.36
    191.237.26.164
    191.237.28.161

    Scale Unit Name: waws-prod-blu-023
    Outbound IP Addresses:
    191.236.50.206
    191.237.30.215
    191.237.25.148
    191.237.22.195

    Scale Unit Name: waws-prod-blu-025
    Outbound IP Addresses:
    191.237.31.86
    191.237.26.176
    191.237.20.70
    191.237.18.239

    Scale Unit Name: waws-prod-blu-027
    Outbound IP Addresses:
    23.96.121.73
    23.96.125.106
    23.96.123.16
    23.96.123.204

    North Central US Region:

    Scale Unit Name: waws-prod-ch1-001
    Outbound IP Addresses:
    168.62.225.22
    168.62.226.18
    168.62.226.19
    168.62.225.21

    Scale Unit Name: waws-prod-ch1-003
    Outbound IP Addresses:
    168.62.226.22
    168.62.226.23
    168.62.226.24
    168.62.226.25

    Scale Unit Name: waws-prod-ch1-005
    Outbound IP Addresses:
    23.96.208.191
    23.96.208.207
    23.96.208.221
    23.96.208.27

    Scale Unit Name: waws-prod-ch1-007
    Outbound IP Addresses:
    23.101.169.251
    23.101.160.120
    23.101.166.179
    23.101.162.7

    Scale Unit Name: waws-prod-ch1-009
    Outbound IP Addresses:
    65.52.24.45
    65.52.24.46
    65.52.24.48
    65.52.24.51

    Scale Unit Name: waws-prod-ch1-011
    Outbound IP Addresses:
    23.101.162.97
    23.101.175.104
    23.101.174.157
    23.101.164.14

    Scale Unit Name: waws-prod-ch1-013
    Outbound IP Addresses:
    191.236.150.197
    191.236.147.142
    191.236.146.62
    191.236.151.40

    South Central US region: 

    Scale Unit Name: waws-prod-sn1-001 
    Outbound IP Addresses:

    191.238.241.84
    191.238.241.132
    191.238.241.146
    191.238.241.113

    Scale Unit Name: waws-prod-sn1-003
    Outbound IP Addresses:

    104.44.128.14
    104.44.128.15
    104.44.128.16
    104.44.128.17

    Scale Unit Name: waws-prod-sn1-005
    Outbound IP Addresses:

    23.102.186.71
    23.101.186.178
    23.101.191.161
    23.101.191.118

    Scale Unit Name: waws-prod-sn1-007
    Outbound IP Addresses:

    23.101.181.124
    23.101.185.142
    23.101.181.66
    23.101.185.75

    Scale Unit Name: waws-prod-sn1-009
    Outbound IP Addresses:

    191.238.181.47
    191.238.180.20
    191.238.178.169
    191.238.181.83

    East US 2 Region:

    Scale Unit Name: waws-prod-bn1-001
    Outbound IP Addresses:
    191.237.129.87
    191.237.129.130
    191.237.129.134
    191.237.129.128

    Scale Unit Name: waws-prod-bn1-003
    Outbound IP Addresses:
    191.236.193.41
    191.236.193.61
    191.236.193.107
    191.236.193.165

    Scale Unit Name: waws-prod-bn1-005
    Outbound IP Addresses:
    23.101.155.128
    23.101.153.122
    23.101.145.41
    23.101.148.134

    Central US Region:

    Scale Unit Name: waws-prod-dm1-001
    Outbound IP Addresses:
    23.99.128.81
    23.99.128.174
    23.99.128.203
    23.99.129.54

    Scale Unit Name: waws-prod-dm1-003
    Outbound IP Addresses:
    23.101.126.141
    23.101.125.77
    23.101.116.190
    23.101.125.157

    Scale Unit Name: waws-prod-dm1-005
    Outbound IP Addresses:
    104.43.142.10
    104.43.140.245
    104.43.138.245
    104.43.136.147

    Japan West Region:

    Scale Unit Name: waws-prod-os1-001
    Outbound IP Addresses:
    138.91.17.178
    138.91.17.193
    138.91.17.229
    138.91.17.24

    Japan East Region:

    Scale Unit Name: waws-prod-kw1-001
    Outbound IP Addresses:
    138.91.1.170
    138.91.1.173
    138.91.2.0
    138.91.4.43

    Scale Unit Name: waws-prod-ty1-001
    Outbound IP Addresses:
    104.41.189.126
    104.41.187.254
    104.41.188.49
    104.41.186.200

    East Asia Region:

    Scale Unit Name: waws-prod-hk1-001
    Outbound IP Addresses:
    65.52.168.77
    65.52.168.81
    65.52.168.84
    65.52.160.98

    Scale Unit Name: waws-prod-hk1-003
    Outbound IP Addresses:
    207.46.144.46
    207.46.144.85
    207.46.144.91
    207.46.148.246

    Scale Unit Name: waws-prod-hk1-005
    Outbound IP Addresses:
    65.52.160.158
    65.52.160.209
    65.52.160.236
    65.52.161.62

    Scale Unit Name: waws-prod-hk1-007
    Outbound IP Addresses:
    23.101.10.142
    23.101.10.143
    23.101.10.144
    23.101.10.145

    Scale Unit Name: waws-prod-hk1-009
    Outbound IP Addresses:
    23.99.115.89
    23.99.116.84
    23.99.116.67
    23.99.114.174

    Southeast Asia Region:

    Scale Unit Name: waws-prod-sg1-001
    Outbound IP Addresses:
    23.98.69.117
    23.98.69.149
    23.98.69.219
    23.98.64.52

    Scale Unit Name: waws-prod-sg1-003
     Outbound IP Addresses:
     23.98.66.136
     23.98.66.167
     23.98.66.249
     23.98.64.20

    Scale Unit Name: waws-prod-sg1-005
    Outbound IP Addresses:
    23.101.27.147
    23.101.27.7
    23.101.27.173
    23.101.26.248

    Scale Unit Name: waws-prod-sg1-007
    Outbound IP Addresses:

    111.221.81.213
    111.221.83.126
    111.221.83.63
    23.101.28.144

    Australia Southeast Region:

    Scale Unit Name: waws-prod-ml1-001
    Outbound IP Addresses:
    23.101.224.25
    23.101.224.26
    23.101.224.27
    23.101.224.28

    Australia East Region:

    Scale Unit Name: waws-prod-sy3-001
    Outbound IP Addresses:
    23.101.208.53
    23.101.208.54
    23.101.208.55
    23.101.208.56

    Scale Unit Name: waws-prod-sy3-003
    Outbound IP Addresses:
    104.210.88.111
    104.210.93.195
    104.210.92.223
    104.210.88.61

    =======COMPLETED UPGRADES=========











    Tuesday, July 01, 2014 7:49 PM
    Moderator

All replies

  • Nice~~
    Wednesday, July 02, 2014 8:43 AM
  • Hi,

    Could it be that the changes your making are affecting the way Azure Websites interact with external database like ClearDB mySQL. All of our sites where working perfectly right until sometime last night. Since then, all of our 6 sites are showing intermitent "error establishing a database connection" for like 5 minutes every 20 minutes.

    Please let me know if your changes could be the source of my issue.

    Edit: Just saw it was for south central, all of our sites are in east US but still I'm curious to know.

    Thanks,



    • Edited by Mathieux Wednesday, July 09, 2014 12:51 AM
    Wednesday, July 09, 2014 12:47 AM
  • Hi Mathieux,

    Can you please sending us your sites name and subscription id to WAWSForums at microsoft.com?

    Thanks,

    Wei

    Thursday, July 10, 2014 2:45 AM
    Moderator
  • We've just been affected by this.

    Please can you list the outgoing IPs in the dashboard section of the web site along with the FTPS host names etc?

    Wednesday, September 10, 2014 3:33 PM
  • I agree completely with the idea of getting the IP's listed on the Azure Portal Dashboard page. This info is critical.

    Additionally I have to say that you need to find another avenue to propagate this kind of change well in advance. We were caught completely unaware of this change and our productions systems were brought down because we use IP whitelisting for some of our WebSite dependencies. In my opinion this sort of change should have been raised to the level of the Azure Status dashboard. There also should have been emails sent warning of the disruption just as you do for IaaS and PaaS single instance deployments.

    This was poorly handled in my view.

    Thursday, September 11, 2014 2:41 AM
  • Indeed, a real shame!
    Thursday, September 11, 2014 6:09 AM
  • Nice, I see I'm not the only one that got burned because of this unseen maintenance operation.

    It would be nice to have a little notification in advance for changes that might affect the way Azure websites interact with other applications.

    Also you should really set up some kind of txt list of the outgoing IP addresses for the specific scale instances, that way it can be periodically checked by Nagios or similar services. Something like what cloudflare has done, exactly to prevent issues such as this: https://www.cloudflare.com/ips-v4

    Thursday, September 11, 2014 8:48 AM
  • This is a critical change and I'm very very suprised I didn't get any maintance email about this topic. Our production system has been down several hours.

    I was also wondering why the outbound IP suddenly changed between 2-3 IPs for each request.

    Will we be notified if the outbound IP is getting more or less IPs in the future????


    • Edited by Lostfields Thursday, September 11, 2014 12:38 PM
    Thursday, September 11, 2014 9:10 AM
  • It would definitely have been good to get notification of this, as I assume this wasn't covered by the maintenance event scheduled for 10th September that wouldn't affect anybody.

    I agree that a list of these on the page for each site would be good.

    Thursday, September 11, 2014 9:41 AM
  • With the recent upgrades the Websites service has a stable set of outbound IP addresses allocated to each of its scale units.  We continue to monitor network utilization and we might add (though never remove) additional IP addresses.

    We take your feedback to heart and for any future changes we will:

    • Attempt to limit changes to only specific scale units in order to reduce overall impact.
    • We will explicitly send email notifications to subscription owners in affected scale units well in advance of any changes.

    We've logged a request with our engineering teams to add the outbound IP address info to the portal so that you will have easy access to it. 

    Also the IP address information in this post will be migrated into the official Azure documentation for websites as well.

    Our apologies for the unexpected impact, and rest assured we listen to your feedback and we will act on it.

    Thursday, September 11, 2014 3:38 PM
    Moderator
  • Hi,

    Could it be that the changes your making are affecting the way Azure Websites interact with external database like ClearDB mySQL. All of our sites where working perfectly right until sometime last night. Since then, all of our 6 sites are showing intermitent "error establishing a database connection" for like 5 minutes every 20 minutes.

    Please let me know if your changes could be the source of my issue.

    Edit: Just saw it was for south central, all of our sites are in east US but still I'm curious to know.

    Thanks,




    I'm having the EXACT same issue... how do you resolve this?!
    Wednesday, September 17, 2014 1:46 PM
  • Prior to this Increase Capacity for Outbound Network Calls update, my Azure websites experienced occasional connection attempt failed errors as posted here. Since this update the errors stopped but starting on 12/30/14, these errors started up again"

    "A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond [IP]:80"

    It occurs when attempting to consume an external web service over HTTP. This issue is not reproducible on our local environments nor did it occur with our previous shared hosting provider. On Azure, the same web service call can result in this error or will return a response successfully. There doesn't appear to be any pattern as to why the same call would work one time but not another.

    Please review and resolve as before. Thanks.


    Tuesday, January 13, 2015 6:46 PM