Azure Datacenter IP ranges from PowerShell to XML

Azure recently released an update to inform that the Weekly publication of Azure datacenter IP ranges (also known as XML files) for Azure PublicChina, and Germany will be deprecated by June 30, 2020. Below is the update that was sent out:-

Instead, you can now download the updated weekly publications (also known as JSON files) or programmatically retrieve this information using the Service Tag Discovery API to integrate with an on-premises firewall. 

You can download and integrate with an on-premises firewall the list of service tags with prefix details on the following weekly publications for Azure PublicUS governmentChina, and Germany clouds.
You can also programmatically retrieve this information using the Service Tag Discovery API (Public Preview) – RESTAzure PowerShell, and Azure CLI.

docs.microsoft.com

Interesting, but you still may need the requirement to have these datacentre IP ranges in XML format, well I have worked on some PowerShell to export the datacentre & IP ranges in the same XML format as previous.

Time to PowerShell

To get the regions and current IP address ranges I will be using the module: Get-AzNetworkServiceTag

Lets dive in to get the required info

Get-AzNetworkServiceTag -Location eastus2

Notice Values show some regions? Time to drill into that

$NetworkServiceTag = Get-AzNetworkServiceTag -Location eastus2
$NetworkServiceTag.Values

Huge output, showing all resources & each resource includes its own region

Now have the resources, although no region or IP addressing? Lets check out properties

$NetworkServiceTag.Values.Properties 

Now we have Regions & IP addressing, now to work out the data we want to ingest into PowerShell and extract via XML.

Each Service output has a blank region – this is all the IP address prefixes for each resource. This wasn’t needed for this scenario though!

Scrolling down the output further, you will notice a list Regions that have no System Service – this is the region data we need

$NetworkServiceTag.Values.Properties | Where-Object { $_.SystemService -eq "" } | Where-Object { $_.Region -ne "" }

Lets arrange the data on how we want it displayed in PowerShell

$data = $NetworkServiceTag.Values.Properties | Where-Object { $_.SystemService -eq "" } | Where-Object { $_.Region -ne "" }

    foreach ($region in $data) {
        $region.Region
        $region.AddressPrefixes
    }

Time to convert this now into XML, thanks to my work colleague for assisting with the script for the XML conversion.

$tmp_path = "$env:TEMP\tmp.xml"

$NetworkServiceTag = Get-AzNetworkServiceTag -Location eastus2

$data = $NetworkServiceTag.Values.Properties | Where-Object { $_.SystemService -eq "" } | Where-Object { $_.Region -ne "" }

$doc = New-Object -Type System.Xml.XmlDocument
$root = $doc.CreateElement('AzurePublicIpAddresses')
$doc.AppendChild($root)

$data | %{
    $region_name = $_.Region
    $subnets = $_.AddressPrefixes
    $region_elem = $doc.CreateElement('Region')
    $root.AppendChild($region_elem) | Out-Null
    $region_elem.SetAttribute('Name', $region_name)
    
    $subnets | %{
        $subnet_elem = $doc.CreateElement('IpRange')
        $region_elem.AppendChild($subnet_elem) | Out-Null
        $subnet_elem.SetAttribute('Subnet',$_)
    }    
}

$doc.Save($tmp_path)
Get-Content $tmp_path

Snippet of .XML output below

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s