This document shows you how to configure an IP allowlist/blocklist to filter requests and control access to streaming content.
How It Works
IP allowlist: Only IP addresses on the list can access your streaming content.
IP blocklist: IP addresses on the list cannot access your streaming content.
Must-Knows
An IP allowlist/blocklist takes effect about ten minutes after configuration.
Prerequisites
You have activated CSS and logged in to the CSS console.
When both IP Blocklist/Allowlist and Playback Region Management (Regional Block/Allowlist) are enabled at the same time, the system's judgment logic is as follows:
1.1 First, check the IP Blocklist/Allowlist:
If the IP is in the allowlist, it is directly allowed.
If the IP is in the blocklist, access is directly denied.
If the IP is not in the blocklist/allowlist, go to the next step.
1.2 Then, check the Regional Block/Allowlist (only when the IP is not in the IP Block/Allowlist):
If the region is in the allowlist, then allow access; otherwise, deny access.
If the region is in the blocklist, then deny access; otherwise, allow access.
Configuring an IP Allowlist/Blocklist
1. Select Domain Management on the left sidebar, and click the target playback domain or click Manage on the right to enter the domain management page.
2. Within the Access Control> IP allowlist/blocklist, click on
to enable the IP Allowlist/Blocklist.
3. After enabling the IP Allowlist/Blocklist , enter the IP Allowlist/Blocklist configuration page and perform the following configuration:
Blocklist
Allowlist
Configuration Item
Description
Authenticate By
Allowlist or blocklist:
You cannot select both.
If you configure an allowlist, only IP addresses on the list will be able to access your streaming content.
If you configure a blocklist, IP addresses on the list cannot access your streaming content.
IP List
The IP blocklist supports a maximum configuration of 200 rules, and the IP allowlist supports up to 500 rules. Please separate entries with a newline character.
You can enter IP addresses or IP ranges (/8/16/24). The “IP address: port number” format is not supported.
IPv6 is not supported currently.
4. Click Save to save the configuration (it takes a while for the configuration to take effect).
Modifying an IP Allowlist/Blocklist
1. Select Domain Management on the left sidebar, and click the target playback domain or click Manage on the right to enter the domain management page.
2. Click Access Control and, in the IP Allowlist/Blocklist area, click Edit.
3. Modify the configuration and click Save.
Disabling IP Allowlist/Blocklist
Follow the steps below to disable IP allowlist/blocklist:
1. Select Domain Management on the left sidebar, and click the target playback domain or click Manage on the right to enter the domain management page.
2. Select the Access Control tab. In the IP allowlist/blocklist area, click
Yes
No
Was this page helpful?