We help IT Professionals succeed at work.

Advise sought on architecturing / provisioning public facing appliance with multiple public IP

Alexandre Takacs
Alexandre Takacs used Ask the Experts™
on
I am trying to find out what are my best bets to setup a cloud facing server (AWS, Azure on any other "reasoanble" provider)  that would have a number of public IP and a VPN to my local network.
At the moment we have an internet connexion with /29 static IP space but this is getting a bit "tight" and is also fairly costly from our ISP.
I think we should rather use a cloud server and tunnel the traffic to our local connection (possibly keeping a few local IP as contingency).
Our requirements:
  • 8 static Ip with some "easy" way to grow if / when needed
  • IPs in Europe
  • 100 Mb symmetric connectivity (we don't need more) with say 1Tb traffic/month (probably significantly less than that)
  • possibility to set up an IDP/IDS on / around the box (as an extra option)
  • obviously good price and reliability
What would be my best bet in setting up this (both in terms of the underlying OS and provider)? I was thinking of running a pfSense VM in AWS but I happy to read your suggestions
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
David FavorFractional CTO
Distinguished Expert 2018

Commented:
Describe your application in detail for better comments.

For example, why exactly you require many IPs + also type of code base (Windows, LAMP, other).

If you begin comparing long term costs of dedicated servers from OVH running LAMP Stacks, verses AWS (heavy VM tech, very slow compared with dedicated machines, surprise AWS bills, Microsoft licenses) you might opt for OVH + LAMP for your runtime environment.
Top Expert 2016

Commented:
8 static Ip with some "easy" way to grow if / when needed Amazon allows up to 5 Elastic IP addresses  per account you can ask for more which are free if used
Azure $3.65USD/IP/Month

Both allow 100 remaps per month for free.

IPs in Europe IP addresses don't belong to a geographic location. right now you are subletting ip addresses from your ISP who probably has them assigned to them and the ARIN database says they are located in X country.  
100 Mb symmetric connectivity (we don't need more) with say 1Tb traffic/month (probably significantly less than that)
! TB will cost you $150USD/month  (0.015 / GB
possibility to set up an IDP/IDS on / around the box (as an extra option) now you are talking compute and storage pricing.
check your options i.e. google cloud/Amazon AWS/Microsoft Azure/
Sample Azure Speeds
2019-09-30_14-11-14.png

Author

Commented:
thanks for those initial pointers.

my goal is to have cheap & flexible (in configuration) fixed IP to use for our local LAN. We host two exchange servers, an RDS farm/gateway, an OnwCloud server, etc - I just want to move the fixed IPs from our local ISP to the cloud. Traffic would be mostly ingress.

OVH might actually be an interesting option - haven't thought of them in this context.
Top Expert 2016

Commented:
You don't get those ip addresses from the cloud.  the cloud provider just allows you to use them. every byte sent to that ip address will have to egress the cloud provider to get to you, the same in the reverse. You have to look at things from their standpoint when it comes to egress.

Author

Commented:
Good (and obvious in retrospect) point about the egress.
I have reviewed the OVH offerings and they seem very competitive for what I am looking at. Anyone doing something similar here ?
have you considered using ipv6 ?
have you considered running multiple services on the same IP ? either using different ports, or alpn, or some other application-level logic ?

if those do not fit the bill, i'd highly suggest you either run your stuff locally or in the cloud, or possibly run two complete different sites rather than forwarding from the cloud to a local site. that would add quite a lot of spofs, latency, possibly contention issues, ...

Author

Commented:
Thanks for all you input - it would indeed seem that it is actually not such a great idea :)
David FavorFractional CTO
Distinguished Expert 2018

Commented:
You can also use OVH, which provides IPs for $3/setup (one time, so no monthly).

This is highly useful as OVH can usually spin up a any number of IPs, from 4-255, in a few minutes.

Author

Commented:
yes I have that on my radar but probably with all services @ OVH - thanks