Hi. I’ve received an IP alert from Brevo by email, as one of my API keys has been used from a new address in the US. All my apps are deployed in LHR. The email is legit and it references a real key. All my keys are server side in secrets so I can only think that, for some reason, the apps routed some traffic via US? I don’t know much about infrastructure so this may not make any sense. But just wondering to rule things out. Thanks
Hi… Or Fly.io moved an IPv4 address that was recently in the US, and the geographic metadata just hasn’t caught up yet.
In general, if you’re using an external API that is sensitive to specific addresses, then you’ll probably want a static egress IP:
https://fly.io/docs/networking/egress-ips/
These static ones may not be completely immune to stale metadata, either, but at least you wouldn’t be getting multiple alerts…
For static egress IPs, we do publish a geofeed to most GeoIP providers, plus that they pretty much never move across regions except in diminishingly rare circumstances, you can probably rest assured that their geographical metadata will not change randomly.