Follow

Q&A: What are the Silverline Subnets (SNAT) / IP Address ranges?

Question

  • What are the Silverline Subnets / IP Address ranges?
  • What are subnets for 'SNAT' used by Silverline?
  • What are subnets for 'front end' proxy IP issues by Silverline?

Environment

  • Silverline WAF 
  • Silverline DDoS
  • Proxy/Proxies
  • GRE Tunnel(s) 
  • SNAT

Answer

F5 Silverline IP space is available at https://snat.f5silverline.com

or

https://snat.f5silverline.com/api/v1/snat for API calls

 

  • To query specific regions (city), you can use the "?region=<keyword>"
  • The <keyword> can be the city name or 3-letter airport code
  • Keep in mind that mPOP (Scrubbing Centers) addresses are the same for each site. Only rPOP addresses change per region.

 

Examples:

https://snat.f5silverline.com/?region=hkg
https://snat.f5silverline.com/?region=hongkong

 

https://snat.f5silverline.com/?region=dca

https://snat.f5silverline.com/?region=lon

https://snat.f5silverline.com/api/v1/snat?region=hkg
https://snat.f5silverline.com/api/v1/snat?region=hongkong

 

      • A full list of locations is provided below:

        Location (City/Country)

        keyword/3-letter airport code

        Sydney, AU

        SYD

        Hong Kong

        HKG

        Sao Paulo, BR

        GRU

        Montreal, CA

        YUL

        Mumbai, IN

        BOM

        Bahrain, BH

        BAH

        Tokyo, JP

        TYO

        Ohio, US

        CMH

        San Jose, CA

        SJC

        Ashburn, VA

        DCA

        London, UK

        LON

        Singapore, SG

        SIN

        Frankfurt, DE

        FRA

Additional Notes for All Proxy Deployments

  • Ideally, you want to only allow the Silverline subnets, exclusively. 
    • This will ensure that only Silverline-routed traffic can reach your network, and thus prevent attackers from being able to circumnavigate the Silverline infrastructure.
  • Front End Proxy IP space is taken from 107.162.128.0/17 IP space.
    • This IP space doesn't need to be allowed through a firewall or router.

 

Related Content

Was this article helpful?
1 out of 2 found this helpful
Have more questions? Submit a request