AWS IoT endpoint resolution from internal network is failing intermittently.

Question

I'm trying to connect to AWS iot endpoint from mqtt broker which is in my private internal network. Outbound connection to the endpoint dns name and port 8883 is enabled in my firewall. When i telnet to the endpoint, it is able establish connection for some ip and for some ips it is failing.

is there a workaround for this? Is it possible to connect to iot endpoint with certain set of ips which i can specifically allow in firewall.

Enter image description here

is there a workaround for this? Is it possible to connect to iot endpoint with certain set of ips which i can specifically allow in firewall.

![Enter image description here](/media/postImages/original/IM-rnf9TYgT-OxYjcOy8Rb8g)

Answer

Hi. The default IoT Core endpoint of your account resolves to numerous IP addresses, and you can't rely on the IP addresses to not change. However, by using the [custom domains](https://docs.aws.amazon.com/iot/latest/developerguide/iot-custom-endpoints-configurable.html) feature, you can achieve static IP addressess: https://aws.amazon.com/blogs/iot/creating-static-ip-addresses-and-custom-domains-for-aws-iot-core-endpoints/

AWS IoT endpoint resolution from internal network is failing intermittently.

Contenido relevante