Virtual Private Gateway
Fixed Global IP Address Option
Overview
Soracom Virtual Private Gateways can optionally be configured with two fixed global (public) IP addresses. These IP addresses are unique to each VPG, and when enabled, all internet-bound traffic will appear to originate from one of these addresses.
In applications where devices are configured to send data over the Internet to a specific destination, the Fixed Global IP Address option allows you to easily define an allowed and denied list for incoming traffic at the destination, ensuring that no unauthorized traffic reaches the destination host. Moreover, the Fixed Global IP Address option applies to all Air for Cellular and Arc devices attached to the corresponding VPG, so no additional configuration is required when scaling up to a large number of devices. Just add an Air or Arc device to an appropriate group, and internet-bound data will automatically appear to originate from one of the fixed IP addresses.
When combined with Soracom Beam, data forwarded by Beam will also appear as originating from one of the two IP addresses, allowing you to freely mix and match devices and communication protocols, offload encryption, and manage endpoint configuration directly within Beam while also maintaining security.
At this time, the source IP address applies only to Air for Cellular and Arc devices, and does not apply to Air for Sigfox or Air for LoRaWAN devices.
When enabling or disabling the Fixed Global IP Address option for a VPG, the IP addresses assigned to the VPG will be changed. Existing connections, such as SSH sessions or data transfers, will need to be reconnected.
Enabling Fixed Global IP Address
The Fixed Global IP Address option will incur fees. Refer to the Pricing & Fee Schedule for more information.
You can enable the Fixed Global IP Address option for a VPG from the User Console.
-
Login to the User Console. From the Menu, open the VPG screen.
-
From the list of VPGs, click the name of the VPG you want to configure to open its settings page.
-
Click the Assign a static IP Address button.
-
Click Enable to confirm enabling the option.
The IP addresses assigned to the VPG will be visible. For your convenience, you can copy each IP address in order to add them to your firewall rules or other security policies.
Disabling Fixed Global IP Address
You can also disable a VPG's Fixed Global IP Address option from the User Console.
-
Login to the User Console. From the Menu, open the VPG screen.
-
From the list of VPGs, click the name of the VPG you want to configure to open its settings page.
-
Click the Change to a dynamic IP Address button.
-
Click Disable to confirm disabling the option.
Important! Disabling the Fixed Global IP Address option will permanently remove the static IP addresses from the VPG. If you re-enable the Fixed Global IP Address option again, a new set of IP addresses will be assigned to the VPG. It is not possible to re-enable the option and resume using the previously assigned IP addresses. You will need to make sure that your firewall rules or other security policies are updated with the new IP addresses.
In addition, please be aware that disabling the Fixed Global IP Address option may interrupt ongoing connections, such as SSH sessions or data transfers.