***UPDATED: 21st June 2018 Connectivity page updated with new IP addresses. Please check below.
***UPDATED: 16th June 2018 Upgrade has been moved to 14th July between 15:00 and 19:00 UTC. In Australia this will take place on Sunday 15th July at 1am AEST.
Over the last month or so a number of clients have experienced cloud connectivity issues in their SAP Cloud Platform environments. The problems were caused by changes in the IP address range for connectivity from SAP Cloud Connectors to SAP Cloud Platform sub-accounts – specifically in the Australia region (Sydney). While there was communication on this it was not really clear what impacts existed or whether customers had to make any changes within their environment to accommodate these changes. This situation has prompted me to write this informational blog post.
I have set up a large number of environments for companies and have always requested a set of firewall rules to be maintained to connect cloud connectors to SCP sub-accounts.
In a usual setup, a number of firewall rules need to be maintained on a customer site to provide access from SAP Cloud Connectors to the SAP Cloud Platform. The below table shows the previous IP addresses.
Table:1 Cloud Connectivity IP addresses for Asia Pacific region
If you have signed up to receive the status emails for SAP Cloud Platform you would have received the following email advice noting changes in the IP addresses.
***NOTE: This has changed – network upgrade is now on Jul 15th 1am AEST.
This status update describes major changes in the IP address range of the Neo AP1 region of SAP Cloud Platform. The key message not really included above is that customers will need to modify their firewall rules. OK, here it is again just in case you missed it.
This message means customers will need to modify their firewall rules!
OK, if you have not signed up for status updates then you need to. This is a good way of keeping track of regular updates and more importantly the scheduled maintenance. To do this follow this link and sign up! https://sapcp.statuspage.io/
In May the IP address for the connectivitynotification.ap1.hana.ondemand.com host changed to 188.8.131.52 – this is where a number of customers experienced connectivity issues. The fix was to update the firewall rules to include the new IP address.
ALL IP addresses will now be updated for end of June 2018 as detailed on the connectivity page (link below).
Table:2 Cloud Connectivity IP addresses for Asia Pacific region – UPDATED
With the June 15 announcement it seems the other two IP addresses in the above table will change also, however this information has not yet been added to the Prerequisites page.
The prerequisites page has now been updated with the new IP addresses. Make sure you update your firewall IP addresses so that you don’t lose connectivity to your applications in SAP Cloud Platform.
***UPDATED 21st June 2018:
That about summarises the upcoming connectivity changes in the AP1 region. I would suggest checking back to this post for updates over the coming weeks, definitely before 30 June.
Thanks for reading and hopefully this is helpful!