Any thoughts on how to whitelist Akamai IP ranges?

[Scott_Fitzmaurice]

Hello Network,

Any thoughts on how to whitelist Akamai IP ranges? I am hoping to use MineMeld as the aggregator of the information.  We currently use it for AWS but I did not see a node built for Akamai.

Thanks in Advance,

Scott 

[JoeAndreini]

I don't have a recommendation on how to connec the dots, but I previously used their AS numbers to whitelist akamai's networks in BGP.  They do not seem to publish IP lists, but maybe you can start there and build a solution?

[BPry]

@Scott_Fitzmaurice,

As @JoeAndreini mentioned gathering the ASN numbers is likely going to be the easiest way to build something like this out. However, may I ask why you are looking to whitelist all of their IPs in the first place? 

If you are simply hosting origins you should be able to get the actual CIDR blocks that they will be using to contact your origin using SiteShield and the LCC. 

If you are just looking to whitelist all Akamai traffic for some other reason the ASN numbers that you would need to do so is currently the following (assuming that you are located in the US, I don't keep track of other countries).

AS36183, AS35994, AS35993, AS30675, AS23455, AS23454, AS22207, AS20189, AS18717, AS18680, AS17334, AS16702, AS16625, AS12222

[mattmnz]

Im yet to search further as this was the first post I came across, however, keen to know if anyone using Akamai's site shield (SS) has a working method to update their SS IP Ranges ( and update permit ACL's ) between a Palo 3020 and their API........... 

Im no developer, I work in infrastructure and am familiar with some automation, but keen to hear of any success stories..