Follow these simple steps to prepare the subnets you lease through the IPXO Marketplace for Azure BYOIP.  

Disclaimer: This guide focuses on a specific aspect of the Azure BYOIP process, explaining how to assign an Azure ASN to your leased subnet and add a certificate. For other details refer to the official Azure BYOIP guide. 

Before you start the process, you should know that there are certain limitations for BYOIP to Azure: 

  • IP range can be used in a single Azure region. 
  • You can bring up to five IP ranges per region. 
  • The mask size of IPv4 range must be between /21 and /24 and /48 for IPv6 range. 
  • It may take around a week before IP range can be used for Windows server activation. 
  • For full list of limitations see Azure BYOIP guide. 

Step 1: Lease a Subnet 

Log in to the IPXO portal. Click on “Lease” and go to the “Marketplace” to lease your desired subnet. 

Step 2: Access your leased IPs  

Following a successful lease, go to the IPXO portal. Select “Lease” (1) and click “My Leased IPs” (2) from the dropdown menu. 

Step 3: Assign Your Subnet  

Find the subnet that you want to bring to Azure and click ‘Assign’ as shown above (3).  

In the “Add AS Organization” section, you will need to assign the Azure AS number. This step is crucial as it allows Azure to advertise your leased range on the ASN provided. The Azure AS number is AS8075. Type it in and click the “Add” button which will become active. 

Please note that to avoid routing problems, part of the subnet cannot be announced on another ASN or with another data centre. For example, if you lease a /23 subnet, neither of its two /24 child subnets can be announced or used elsewhere. 
 
Make sure “Issue ROA (-s) for the subnet (-s)” is selected. Feel free to leave the rest of the selected options marked unless you don't need any specific record to be created.  

Click ‘Continue’ and you will be redirected to a new page to pay the LOA fee. 

Once we receive your request, the creation of the required records will be initiated. 

Step 4: Confirming the ROA creation 

You will receive a letter from the IPXO team upon successful creation of the ROA record. 

Step 5: Creating a certificate  

You will have to create a self-signed X509-certificate. Instructions on how to do it can be found in this Azure guide section.  

Once you create the certificate, reach out to our Customer Solutions team and we’ll add it to the registry.  

Step 6: Follow Azure’s BYOIP instructions 

After we confirm that the certificate is added, proceed further with the instructions on the Azure BYOIP guide. 

If you have any questions or need assistance, do not hesitate to contact us via help.ipxo.com.