Score:0

Restricting access to UK IPs without sacrificing Ubuntu's functionality

es flag

I have a customer who restricts outbound traffic to anything outside of the US. Just came up today. I realized that us.archive.ubuntu.com actually points to an IP address that falls within Canonical's IP range that sits in the UK.

As a result, I assume the customer's not going to be install updates, etc. because of this. I feel like I have to be missing something because US was selected in the installation process, but this whole situation is relatively new for me so I'm a bit confused as to what to suggest, other than a different OS that has their servers specifically located in the US.

Any advice on how I can get around this to point to IPs specifically located in the US?

pLumo avatar
in flag
Did you try it? Some IP lookups say it's in Boston, USA, some say it's in UK. Maybe it gets routed depending on your location.
user3447014 avatar
es flag
Try what? Sorry. When they resolve us.archive.ubuntu.com, it points to an IP in the UK. Other customers that are sort of child companies like them have mentioned theirs point to Amsterdam and other various locations outside of the US.
pLumo avatar
in flag
I mean the IP is `91.189.91.39`. And to this very same IP, different locations are reported from different services.
user535733 avatar
cn flag
You could pick a US-based mirror ([list of mirrors](https://launchpad.net/ubuntu/+archivemirrors)) directly instead of using the generic mirror domain names which might forward elsewhere. However, mirrors come and go, so that adds a tiny maintenance burden.
user3447014 avatar
es flag
Thanks for this information, @user535733. This is actually very helpful. Any idea about security updates? (security.ubuntu.com)
user535733 avatar
cn flag
That one will be a problem: security.ubuntu.com does not use mirrors, so you always get the latest patches from the source. Your customer's policy is counterproductive in this case, so requesting an exception to that policy seems appropriate. If Ubuntu is good enough for Netflix and Google to use on their production systems....
mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.