Archived Support Site

This support site is archived. You can view the old support discussions but you cannot post new discussions.

IP Address check for database access

opspark

07 Apr, 2011 06:23 PM

Is it possible to limit the IP addresses that an Appharbor database can be accessed from?

Another related question: is it possible to have a fixed IP address for an application hosted on Appharbor? I'm guessing this is probably not possible since I read elsewhere that you can move the application to another server at any time.

Any additional information/recommendations you can share related to securing the database is appreciated.

Thanks
Jaspreet Bakshi

  1. #1 Posted by rune Support staff on 07 Apr, 2011 06:44 PM

    Hi Jaspreet,

    It's true that your application may be moved between application servers at any time, but the servers will always have the IPs listed in this KB article: http://support.appharbor.com/kb/tips-and-tricks/application-server-ips

    It would probably be a good idea to check back every once in a while to make sure that you've added all the IPs that your application may run from - in the future we may add more IP ranges. We'll announce new IP ranges in good time and most likely in a newsletter to make sure you don't get any unpleasant surprises.

    Best,
    Rune

  2. rune closed this discussion on 07 Apr, 2011 06:44 PM.

  3. opspark re-opened this discussion on 07 Apr, 2011 06:49 PM

  4. #2 Posted by opspark on 07 Apr, 2011 06:49 PM

    Great. Will it be possible to limit access to an appharbor database to be only from this IP range? And possibly a couple more IPs (so we can hit the DB from say our local machine)?

  5. #3 Posted by rune Support staff on 07 Apr, 2011 07:07 PM

    Allright, I thought you wanted to restrict access for to your own database server. It's currently not possible to restrict access to individual databases on our shared database servers, but I'm curious as to why you would like that?

  6. rune closed this discussion on 07 Apr, 2011 07:07 PM.

  7. opspark re-opened this discussion on 08 Apr, 2011 12:17 AM

  8. #4 Posted by opspark on 08 Apr, 2011 12:17 AM

    I'm not an expert on security so pardon me if I ask something unreasonable :-)

    I guess my concern is that if I am hosting data on an AppHarbor database, and somehow it's password gets compromised, having an additional level of security (IP address check) is better. However, I do realize that just an IP address check is no guarantee as it could be impersonated.

    So it's really a question to you. Do you think an additional layer of security is justified here? On doing some reading on this topic, it looks like Azure provides SSL for communication between application code running on the webserver and the SQL Azure database (http://msdn.microsoft.com/en-us/library/ee336239.aspx).

    Does AppHarbor plan to offer such functionality?

    Thanks
    Jaspreet

  9. friism closed this discussion on 08 Apr, 2011 06:58 PM.

Discussions are closed to public comments.
If you need help with AppHarbor please start a new discussion.

Keyboard shortcuts

Generic

? Show this help
ESC Blurs the current field

Comment Form

r Focus the comment reply box
^ + ↩ Submit the comment

You can use Command ⌘ instead of Control ^ on Mac