tencent cloud

Feedback

Managing IP Allowlist and Blocklist

Last updated: 2024-02-02 15:17:07

    Overview

    If you want to access CDWPG clusters through CVM instances in other subnets or servers on the public network other than the CVM instances in the specified subnets, you need to add their IPs to the allowlist.
    An IP range can be specified when an IP is added to the allowlist. Add one or more IPs in the IP range to the blocklist if you want to block the access to CDWPG clusters from them.
    Note:
    The blocklist takes precedence over the allowlist.

    Prerequisites

    Before using the IP allowlist, make sure that you have applied for a public IP for a CDWPG cluster; otherwise, you will not be able to access the cluster from servers other than CVM instances in the specified subnets even if their addresses are added to the allowlist.

    Directions

    Managing IP allowlist

    1. Click Manage in the cluster list to enter the cluster details page.
    2. Select Configure > Access Allowlist.
    3. Click Create Allowlist and enter the IP, username, database name, and CIDR block as required.
    
    
    4. Click OK to allow the IP range specified by the CIDR block. Then, you can access the CDWPG cluster from a server at the IP or IP range.
    Note:
    When an IP address in the allowlist is no longer needed, select it in the allowlist and click Delete to remove it from the allowlist.

    Managing IP blocklist

    1. Select Configure > Access Blocklist.
    2. Click Create Blocklist and enter the IP, username, database name, and CIDR block as required.
    3. Click OK to block the IP range specified by the CIDR block. Then, you cannot access the CDWPG cluster from a server at the IP or IP range.
    Note:
    To unblock an IP or IP range, select it in the blocklist and click Delete to remove it from the blocklist.
    Contact Us

    Contact our sales team or business advisors to help your business.

    Technical Support

    Open a ticket if you're looking for further assistance. Our Ticket is 7x24 avaliable.

    7x24 Phone Support