whatsmyip.com not returning correct dedicated IP address

Products

• Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

Dedicated IP address enabled for https://whatsmyip.com, yet when I access the site the IP address reported is not my assigned dedicated IP address.

whatsmyipaddress.com returning my IP address as regular Cloud SWG datacenter IP address.

Environment

Dedicated IP address domain enabled.

Cloud SWG.

All access methods.

Cause

Application issue with whatismyip.com where an application on this host runs javascript from other domains to gather the IP address. If these other domains are not part of the dedicated IP address setup, there is a risk that the IP address returned is invalid.

Resolution

If you need a simple backend domain to confirm IP addresses with dedicated IP feature, use ipchicken.com or ifconfig.me. Both of these will always report the correct dedicated IP.

Alternatively (see additional information below), use the Cloud SWG HTTP logs to confirm the egress IP for all requests.

Additional Information

The HTTP logs will always return dedicated IP address information for the domains accessed. In the case of whatismyip.com, the HTTP logs confirmed that dedicated IP addressing was used even though the IP address returned by the site did not report it correctly. The highlighted logs below indicate the dedicated IP (148.64.18.200), as well as the domain, the dedicated application name (whatismyip.com) and the NAT gateway the request egressed from (natproxy1).

2023-03-02 14:46:23 "DP2-GGBLO99_proxysg1" 303677 123.231.125.251 "[email protected]" "KUaQW3VdhyZ4MjPfKiYa7GXa7wEP9N+vJ4y4Gq4Jp2c=" - - - OBSERVED "Technology/Internet" - 0 TUNNELED unknown - ssl whatismyip.com 443 / - - - 192.168.2.84 440685 19257 - - - - - - - - 0 "client" client_connector "WhatIsMyIP" "-" 104.21.89.158 "United States" - none - - TLSv1.3 TLS_AES_128_GCM_SHA256 128 whatismyip.com "Technology/Internet" TLSv1.3 TLS_AES_128_GCM_SHA256 128 - ICAP_NOT_SCANNED - - ICAP_NOT_SCANNED - - - - - - 0 104.21.89.158 - - "Ireland" 5 5 wss-agent architecture=x86_64%20name=Windows%2010%20Pro%20version=10.0.19041 9.1.1.19060 192.168.178.117 83c76225-4039-4f2a-97f2-1a8f5fab0d3a LAB-FKSWNQ2 PC - - - - - - - - 2001:0DB8:7dc4:8180:7b48:5ae1:107c:eed7 07828d8ef8aef5f7-00000000002a0d82-000000006400b58f 148.64.18.200 100.65.10.182 "None" "None" 6445573466614250827b984d1b9defe4 "whatismyip.com" "natproxy1.np1-ggblonc1.prod.bluecoatcloud.com"