CDN IP Address Ranges and Access Management in NetSuite

TL;DR Opening

NetSuite utilizes a Content Delivery Network (CDN) that assigns a dynamic range of IP addresses daily, which significantly impacts access management. It is crucial for administrators to understand how to effectively manage access to services without relying on static IPs.

Understanding CDN IP Address Ranges

A Content Delivery Network (CDN) does not provide a single IP address for your site; instead, it assigns a range of addresses that can change daily. This variability means that relying on specific IPs for security or functionality purposes is impractical. NetSuite's CDN IP addresses are susceptible to alterations that cannot be anticipated or controlled.

Key Considerations

• Dynamic IPs: The IP addresses managed by CDNs can change frequently, making it challenging to maintain a safelist.
• Service Impact: Any attempt to add CDN IP addresses to a safelist may lead to complications accessing secured documents stored under your domain.
• Support Limitations: NetSuite cannot predict or guarantee specific IP addresses, and its support team will not provide a list of current IP addresses used by the CDN.

Best Practices for Manage Access to NetSuite Services

Due to the unpredictable nature of IP addresses, relying on them for access management is not advisable. Instead, consider the following best practices:

• Dynamic DNS Usage: Rely on DNS for routing traffic to NetSuite services instead of static IPs, to optimize resource allocation and minimize service interruptions.
• Alternative Access Management: Utilize features like Two-Factor Authentication (2FA) to manage access instead of IP filtering.
  • For more on User access: See Two-Factor Authentication (2FA).
  • Learn about SOAP web services through the Integration Record Overview.
  • For RESTful interactions, consider Token-based Authentication (TBA) and OAuth 2.0 methods for better access management.

Conclusion

In summary, due to the nature of CDN IP address dynamics, relying on specific addresses is not an effective strategy for managing access to NetSuite services. Emphasizing security measures like 2FA and structuring access through DNS are superior alternatives to prevent unpredictable service outages.

Key Takeaways

• NetSuite's CDN assigns dynamic IP addresses that change frequently.
• Adding CDN IP addresses to safelists is not feasible, leading to potential access issues.
• Utilizing DNS for routing and implementing security best practices is essential for proper access management.