Hi, everyone, and welcome back.
Now, in today's video, we are going to discuss about bring your own IP addresses in a WS.
Now, before we discuss further, let's go ahead and understand the basics of IP reputation.
Now, generally IP reputation is a measure that evaluates the quality of an IP address to determine
how legitimate the requests are.
Now, when you have various use cases like that of the email servers and others, IP reputation is one
of the very important checks that you have to perform.
Now, the bad IP reputation generally corresponds to activities like sending spam, emails, viruses,
etc. that originates from a specific IP.
Now there are many websites that gives you the information related to the IP reputation.
For example, if you look into this specific screenshot, there is one specific IP.
There is a network owner which is Digital Ocean, and there is a reputation associated with this IP.
So the sender IP reputation is poor and the web reputation is untrusted.
So depending upon the reputation, a lot of things gets affected as well.
So let's go ahead and also quickly look into this.
Now, in the industry, there are a lot of organizations and websites who maintains the list of IP addresses
with bad reputation.
So let's go ahead and quickly look into it.
So there are certain IP addresses in this specific GitHub repository.
We'll take an example of one of these.
Let's take one of the examples here.
And there are again, a lot of websites which will allow you to check the reputation of a specific IP.
So let's go ahead and add this specific IP.
I'll quickly search for this.
Now, if you look into the IP reputation here, it is neutral.
The web reputation here is untrusted.
Along with this, it also gives you the network owner and the location data.
Great.
So I hope with this you understood the basics of IP reputation.
Now, let's go ahead and discuss about a use case associated with organization migrating to cloud.
So let's say that organization's infrastructure is hosted in its on premise data center from many years.
Everything is working fine.
Everyone is happy except the finance team, because the cost is quite significant.
So they have decided to move to cloud.
Now, one of the things that needs to be noted here is that since they are hosted on the on premise
data center, they also have certain set of public IP addresses from many years.
And these set of IP addresses have a very good reputation.
Now since they are moving to cloud, the cloud provider might have a different set of IP addresses which
might not have as good reputation as the origin IP address that the organization might have.
And this can create issues.
Many of the organizations have IP addresses from years with a very good reputation, and as part of
migration, they would like to maintain the same set of IP addresses.
And in order to overcome this challenges, it has introduced a feature of Bring your own IP, which
allows the organizations to bring a part of their publicly routable IPV four or IPV six address ranges
from on premise network to an account a very simple feature to understand.
But the main aim is to understand why this feature proves to be very important for the organization.
So now let's go ahead and understand the benefits that the bring your own IP provides apart from the
IP reputation.
Now first benefit, as we already discussed, is the IP reputation.
Second important benefit is the customer whitelisting.
Let's say that the organization's IP have been whitelisted by its customers and they have thousands
of customers.
So if they're migrating to cloud, essentially all the 1000 customers will have to whitelist a new set
of IP addresses in their firewall and this can be a hassle.
So in case if the organization decides to use the bring your own IP feature, then there is no need
to whitelist again by its customers.
So this makes things much more simpler.
And third, primary benefit can also be related to the regulation and compliance.
Now, before we conclude a few important pointers that we need to note, first one is that the address
range that you add as part of bring your own IP must be registered with a regional internet registry
such as the ARIN, which is primarily the American, the right, which is the registry at a European
level as well as the APNIC for Asia.
The second important point is that the IP address must be registered to a business or an institutional
entity and cannot be registered at an individual person.
Third important point is that the most specific IPV four range that you can bring is slash 24.
And related to the IPV six, you can bring the slash 48 for C ideas that are publicly advertised and
slash 56 for the kids that are not publicly advertised.
One more important point to note here is that the addresses that you bring must have a clean history.
Eight of us might in.
Investigate the reputation of the IP address.
And based on that, they might also reject it in case if it has a poor reputation.
So this is also one thing to note.
The last point to note is that the customers can create the elastic IP addresses from the IPV four space
that they bring to a place, and they can use that elastic IP addresses with various resources like
easy to instances, net gateways, network load balances as well.
So that's a very high level overview about the bring your own IP feature and with this will conclude
today's video.