How to use different outbound IPs per container instance in Azure container apps

LuisC 0

Hi, I have a requirement to make each container instance have a different outbound IP just in case one of them gets blacklisted. I made tests with the Azure container app but each instance get the same outbound IP from the Azure container app environment. Is what I'm asking possible?

Miguel Gonçalves | AVANADE 886 Reputation points

2024-06-12T20:09:50.1533333+00:00

Hi Luis,

By default, each ACI instance within a container group shares the same outbound IP address. This can be problematic if one instance gets blacklisted, affecting all others.
LuisC 0 Reputation points

2024-06-12T20:34:06.28+00:00

By default, each ACI instance within a container group shares the same outbound IP address. This can be problematic if one instance gets blacklisted, affecting all others.

Does ACI have the same behavior as the Azure container apps?
Miguel Gonçalves | AVANADE 886 Reputation points

2024-06-13T14:57:42.2066667+00:00

Hi LuisC,
Both Azure Container Instances (ACI) and Azure Container Apps share similar behavior in terms of outbound IP addresses.
In both cases, while you can control the outbound IP to some extent, having a unique outbound IP for each container instance may not be directly achievable. You might need to consider other strategies to mitigate the risk of getting blacklisted, such as rate limiting, good security practices, etc.

1 answer

akinbade abiola 6,420 Reputation points

2024-06-12T22:55:27.5066667+00:00

Hello LuisC,

Thanks for your question.

By default, When you deploy container instances using Azure Container Instances, they share the same outbound IP address if they are within the same virtual network or subnet. Using Separate IPs is not supported by default.

https://video2.skills-academy.com/en-us/azure/container-instances/container-instances-vnet

You could consider leveraging private endpoints to route traffic through the Azure internal network, eliminating reliance on a public IP as a work around.

Regards,

You can mark it 'Accept Answer' if this helped.
Please sign in to rate this answer.
LuisC 0 Reputation points

2024-06-13T14:02:56.9733333+00:00

Does ACI have the same behavior as the Azure container apps?

akinbade abiola 6,420 Reputation points

2024-06-13T18:48:21.22+00:00

Yes they both share the same behaviour. This means if one container instance gets blacklisted due to outbound traffic patterns, it can impact all other instances using the same IP.

Please remember to mark it 'Accept Answer' if this helped.
Sign in to comment

Share via

How to use different outbound IPs per container instance in Azure container apps

1 answer