Grafana changing IP


#1

Every so often my dashboard loses access to my DB. When I check, I find that the IP that’s accessing my DB has changed.

Is this due to Grafana getting auto-upgraded and re-provisioned? Is there a way around this?


#2

I have asked our Hosted Grafana team. Just to be clear - are you asking for a fixed IP address for your Grafana instance? Is it because you have a whitelist in your firewall?


#3

Yes! That would certainly work. :smiley:


#4

The Hosted Grafana platform uses multiple clusters of machines to provide the highest possible availability and reliability, which means that both the source IP for a given instance and the set of IPs used by all instances can (and do) change quite regularly.

In general we advise strongly against relying on source IP address based access control, not only because of the issues with maintaining a list of allowed IP addresses but because there will be multiple Grafana instances on any given host which will necessarily share the same source IP and thus would also have access to your data source. In addition, the traffic between your Grafana instance and your data source would not be encrypted in transit.

Our standard recommendation is to place an nginx reverse proxy in front of your data source and use that to provide transport security with TLS and authentication either via HTTP basic auth or TLS client certificates, both of which are supported by Grafana.


Mysql connect ip addr
#5

I hear you but the NGINX bit is beyond me. If you have a guide I can get cracking.


#6

@ewejinyeap did you get this working? I don’t have an NGINX guide to hand. It is on our todo list to document using apache, nginx and IIS as reverse proxies.


#7

Unfortunately, no. I just put up with whitelisting a new IP every time it happens for the moment.