Blogs›Modal›Static IP Proxies

Static IP Proxies

posts

2024

Modal now offers Static IP Proxies, enabling serverless containers to egress traffic through consistent, globally distributed IPv4 addresses. This is achieved by deploying a Go-based VPN proxy (_vprox_) utilizing WireGuard to establish Layer 3 tunnels between containers and proxy nodes. The system handles dynamic IP allocation, peer management, and policy-based routing on worker machines to ensure all outbound traffic from containers originates from a static IP. This addresses scenarios requiring stable egress IPs for database connections and other private resource access. The latest update allows for workspace-exclusive static IPs.

2024

WireGuard at Modal: Static IPs for serverless containers

12/2/2024

Introduced _vprox_, a Go-based VPN proxy leveraging WireGuard to provide static outbound IP addresses for serverless containers. Implemented WireGuard tunnel setup with TLS for key distribution, peer management with idle timeout detection using `wgctrl`, and client-side connection probing. On the worker side, implemented policy-based routing and masquerading to direct container traffic through the WireGuard tunnel, ensuring consistent source IPs for all outbound internet access.

Product updates: Static IP proxies, Slack integration, live usage dashboard & more

11/8/2024

Introduced workspace-exclusive static IP proxies, allowing users to route outbound traffic through dedicated, stable IPv4 addresses for enhanced security and access to private resources like databases.