A new SWG service called ‘Persistent IP’ will be enabled on January 31st, 2022. As a multi-tenant cloud security service, Umbrella runs instances of its services in containers. These containers are assigned an IP address from our 18.104.22.168/16 network. If a container becomes unavailable, any active sessions in the container are migrated to a new container and, thus, the egress IP address will change. Some web hosts will see this shifting source IP as anomalous behavior and drop the connection.
The purpose of Persistent IP is to maintain the egress IP for active sessions when they are migrated from one container to another. Web hosts will always see a consistent source IP throughout the session, and therefore the connection will not be interrupted.
The most notable change with Persistent IP that may affect customers is that containers will now be assigned egress IPs from a new network: 22.214.171.124/16. Customers who have added Umbrella to any 3rd-party allow lists should update these lists prior to January 31st to avoid any interruption in connectivity or services with those 3rd parties.
Customers who require a temporary exemption may contact Support or their Account Team. Please note that all exemptions to Persistent IP will be removed on April 29th, 2022, but customers may contact Support before then to have their exemption removed.
Note: earlier in 2021 the ‘TLS/SSL Resumption’ service was rolled out. This feature is similar to Persistent IP, but only non-decrypted HTTPS traffic was affected. Persistent IP includes decrypted HTTPS and plain HTTP traffic. If you already updated your allow lists with 3rd parties to use the 126.96.36.199/16 network, then no other steps are required to prepare your organization for Persistent IP.