5

Is there a way to get an IP address to refer to Amazon S3 Storage location? The current solution my company is thinking of going with involves setting up a EC2 server with an Elastic IP and using Squid as a Proxy to the S3 location. Is there a better way?

11

I assume this is to work with geniuses who love static firewall rules.

There is probably not a better way, unfortunately. You simply have to put a proxy with a fixed IP address in front of S3 to present the client with a fixed IP. You could in theory pick an existing S3 IP, but it might change from underneath you if amazon changes their network.

We have similar trouble with some of our customers who insist that white-listing allowed sites by IP address is somehow "more secure" than using a filtering proxy (or even reasonable given the pace of change on the internet). We can't use CDNs because of this (although anycast-based CDNs such as MaxCDN or CacheFly might work out, we're testing).

I would not use squid unless you're a complete masochist. Nginx would be a much better option as a reverse-proxy: smaller, faster, more secure, easier to configure.

| improve this answer | |
  • 2
    Good answer. The "what IP should we whitelist" thing drives me bonkers. – ceejayoz Feb 16 '12 at 19:51
  • This is for those geniuses. Actually customer geniuses. +1 – Tyndall Feb 17 '12 at 20:12
  • The overall tone regarding these so called 'geniuses' made me question whether there's an alternative to providing IP addresses on request - serverfault.com/q/817818/87952 (@ceejayoz I welcome your thoughts also) – davur Nov 30 '16 at 6:10
  • 3
    @davur in the last few years we've taken a firm stance, and gotten away with "How do you whitelist Google? Or Salesforce.com? We need to be handled the same way. We do not provide a list of IP addresses because they change daily. Welcome to The Cloud." To my knowledge, we've not lost a single customer or prospect as a result. – rmalayter Nov 30 '16 at 10:34

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.