Whitelisting set of IP adresses - API Proxy to backend service

[#1]

We are setting up security between our backend service and our Apigee API Proxy. My company will not allow opening our backend API to the entire internet, so we want to use two way SSL and but also set up a range of ip addresses that our backend will accept requests from.

I was looking for a way to set our accepted ip addresses and stumbled upon this question, but did not see a resolution: https://getsatisfaction.com/apigee/topics/apigee_ip_addresses_to_configure

I understand the ip addresses of Apigee's services are not static, but is there a way to whitelist a subnet or range ip addresses?

[#2 · Accepted solution]

Yes, this can be done, but the IP addresses are different for each customer/organization. Open a ticket in your support portal and we'll be happy to help.

[mdunker]

Note that you can only do this for a paid organization, not a developer (free) organization. There is no guarantee that free org message processor IP addresses will stay the same.

[#4]

Can I implement 2 way SSL to secure backend for a free org account? Are there any other options available?

[sudheendras]

No, it's not supported on free orgs.

[sudheendras]

In the future, please ask a new question unless it's actually associated to an existing question..