Is it possible to route outbound traffic from a droplet through its floating IP. I.e., make http requests from the droplet that appear to originate from the floating IP?
This textbox defaults to using Markdown to format your answer.
You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.
The short answer is yes. The longer answer is that it depends on the software you are using to make the request. It needs to expose some way of binding to a particular interface. If it does, you’ll need to find what we call the “anchor IP” and use it. The easiest way to find the anchor IP is to inspect your Droplet’s metadata. From the Droplet, run:
In my case, it returns
10.10.0.8
If you wanted to make your request withcurl
you could then use:Or with
wget
you would use:In both cases,
example.com
would now see the request as coming from my Floating IP not my Droplet’s IP address.Check out this tutorial for more info on Floating IPs: How To Use Floating IPs on DigitalOcean In particular, see the section on “Droplet Anchor IPs.”
The following worked for me on ubuntu:
Find the IPv4 gateway anchor:
If you’re concerned about copy / pasting random things (and you should be); the Floating IP gateway documentation can be found here:
https://developers.digitalocean.com/documentation/metadata/#interface-anchor_ipv4-gateway
It’s crazy that I would think this would be such an essential, important feature of floating ips and yet it’s nearly impossible. After fighting this for about 2 or 3 ours on Ubuntu (Tried pretty much everything here, I could not get it to work).
What I ended up doing is using Squid proxy to handle this. If anyone is interested, here’s a bash script to setup Squid locally (with authentication) and have it route traffic through the floating IP (the line with
tcp_outgoing_address $GATEWAY ev
is basically where the magic happens).Hopefully DO can shed some light on how to do this properly soon.