This is an optional step that seeks to simplify your usage of the IPAM API.
IPAM API
Introduction
IPAM is an IP Address Management tool for Scaleway's ecosystem.
It acts as a single source of truth for the IP addresses of Scaleway resources. You can use the IPAM API to list public IP addresses for products such as Instances, Databases and Load Balancer which are already using IP mobility. More products will be integrated in the future.
Scaleway's IPAM also powers the addressing of resources of all resources in a VPC, simplifying management of IP allocations, conflicts and lifecycle. Private Networks' DHCP server hands out the static private IP addresses assigned by IPAM to resources attached to Private Networks.
IPAM allows you to book IPs, to ensure they won't be allocated to some other resource. You can use these booked IPs directly on custom environments (e.g. VMs on an Elastic Metal server). In the future, you will be also be able to specify a booked IP to use when attaching a resource to a Private Network. In the meantime, when you attach a resource to a Private Network, its IP address is assigned by IPAM and then automatically attached by the product/resource.
IPAM gives you a number of guarantees about IPs:
- once booked, the IP will never change
- once attached to a resource, no other resource will be able to use the IP, ensuring unicity
- once attached to a resource, the IP cannot be released unless detached from the resource
Concepts
Resource
An IPAM IP can be attached to a resource, which is identified by its type (e.g. an Instance Private NIC) and its UUID. Once attached, most operations on the IP are not available anymore: it must first be detached.
Once an IP is attached to a resource, it is not possible anymore to:
- release the IP
- detach the IP (without detaching the resource from the Private Network first)
When an IP is attached to a resource, only the product managing the resource can detach the IP, by detaching the resource from the Private Network. This ensures that IPs cannot be reused and avoid mistakes.
Source
An IP can be booked in several different sources, which can be understood as distinct pools of available IP.
Sources can be either global like the zonal
source which is shared across all users, or specific, like the private_network
source, that is identified by the Private Network ID, and will hand out IPs from a specific Private Network.
Quickstart
Requirements:
- You have a Scaleway account
- You have created an API key and that the API key has sufficient IAM permissions to perform the actions described on this page
- You have installed
curl
-
Configure your environment variables.
Noteexport SCW_SECRET_KEY="<API secret key>"export SCW_DEFAULT_REGION="<Scaleway default Region>"export SCW_PROJECT_ID="<Scaleway Project ID>"export SCW_PRIVATE_NETWORK_ID="<Scaleway Private Network ID>" -
Create an IP: run the following command to create an IP in a specified Private Network. You can customize the tags as you wish. The IP will not be attached to any resource.
curl -X POST \-H "X-Auth-Token: $SCW_SECRET_KEY" \"https://api.scaleway.com/ipam/v1/regions/$SCW_DEFAULT_REGION/ips" \--json '{"project_id": "'"$SCW_PROJECT_ID"'","source": {"private_network_id": "'"$SCW_PRIVATE_NETWORK_ID"'"},"tags": ["test", "another tag"]}' -
Get a list of your IPs: run the following command to get a list of all the IPs in your account, with their details:
curl -X GET \-H "X-Auth-Token: $SCW_SECRET_KEY" \"https://api.scaleway.com/ipam/v1/regions/$SCW_DEFAULT_REGION/ips" -
Get a list of your IPs in a Private Network: run the following command to get a list of all the IPs in a Private Network, with their details:
curl -X GET \-H "X-Auth-Token: $SCW_SECRET_KEY" \"https://api.scaleway.com/ipam/v1/regions/$SCW_DEFAULT_REGION/ips?private_network_id=$SCW_PRIVATE_NETWORK_ID" -
Release an IP: run the following command to delete an IP, if it is not attached to a resource. Ensure that you replace
<IP-ID>
in the URL with the ID of the IP you want to release.curl -X DELETE \-H "X-Auth-Token: $SCW_SECRET_KEY" \"https://api.scaleway.com/ipam/v1/regions/$SCW_DEFAULT_REGION/ips/<IP-ID>"
- You have a Scaleway account
- You have created an API key and that the API key has sufficient IAM permissions to perform the actions described on this page
- You have installed
curl
Technical limitations
Scaleway's IPAM is a new tool. Not all Scaleway products are currently integrated in terms of public IP addressing, and not all functionalities are currently publicly available for the management of private IPs in a VPC (for example, not all products support specifying a booked IP when attaching a resource to a Private Network). More features and functionalities will be added in due course. In the meantime, read our blog post to find out more about how we are tackling technical debt with IP mobility.
Going further
For more help using Scaleway IPAM and network products, check out the following resources:
- Our VPC documentation
- The #virtual-private-cloud channel on our Slack Community
- Our support ticketing system.
IPs
An IP address is the building block for network communications in a VPC or on the public Internet.
GET
/ipam/v1/regions/{region}/ips
POST
/ipam/v1/regions/{region}/ips
GET
/ipam/v1/regions/{region}/ips/{ip_id}
PATCH
/ipam/v1/regions/{region}/ips/{ip_id}
DELETE
/ipam/v1/regions/{region}/ips/{ip_id}
POST
/ipam/v1/regions/{region}/ips/{ip_id}/attach
POST
/ipam/v1/regions/{region}/ips/{ip_id}/detach
POST
/ipam/v1/regions/{region}/ips/{ip_id}/move