TechPrufer
Get started
Modal
Modal logoModal · Feature trail

Static IP Proxies

2 posts · Nov 2024 – Dec 2024

What this trail covers

Modal's platform supports static IP egress for serverless containers, enabling secure connections to private resources. This is achieved through a Go-based VPN proxy (_vprox_) utilizing WireGuard for Layer 3 tunnels, handling dynamic IP allocation and policy-based routing. The system ensures all outbound traffic originates from a static IP, addressing requirements for consistent egress IPs.

All Modal trails
  1. WireGuard at Modal: Static IPs for serverless containersThis post details the implementation of Modal's Static IP Proxies, which leverage WireGuard for Layer 3 VPN tunnels to provide consistent IPv4 egress addresses for serverless containers. It describes the design of the Go-based _vprox_ proxy, including its HTTPS listener for connection setup, peer management using wgctrl and handshake times for idle peer removal, and client-side connection probing. The post also explains how policy-based routing and IP masquerading on worker machines ensure all container traffic is routed through the VPN, enabling static IP access for external services.
  2. Product updates: Static IP proxies, Slack integration, live usage dashboard & moreIntroduces Static IP Proxies, allowing serverless containers to egress traffic through consistent, globally distributed IPv4 addresses. This is implemented using a Go-based VPN proxy (_vprox_) with WireGuard for Layer 3 tunnels, managing dynamic IP allocation and policy-based routing on worker machines to ensure outbound traffic originates from a static IP.