Access Control
Access to services that use the TCP or UDP protocol can be restricted using allowlist rules. Only IP addresses or subnets that match a rule will be able to reach your service.
How It Works
Section titled “How It Works”When you add one or more allowlist rules to a service, only traffic from the specified IP addresses or subnets is allowed. All other traffic is blocked.
If no rules are configured, the service is open to all traffic (default behavior).
Adding a Rule
Section titled “Adding a Rule”- Navigate to your service settings
- Find the Access Control section
- Click Add Rule
- Enter an IP address or CIDR range
- Optionally add a comment to describe the rule (e.g. “Office VPN” or “CI server”)
CIDR Notation
Section titled “CIDR Notation”Rules use CIDR notation to specify IP ranges, for both IPv4 and IPv6:
| Rule | What it matches |
|---|---|
203.0.113.10 | A single IPv4 address |
203.0.113.0/24 | All IPs from 203.0.113.0 to 203.0.113.255 (256 addresses) |
0.0.0.0/0 | All IPv4 addresses |
2001:db8::1 | A single IPv6 address |
2001:db8::/48 | An IPv6 range |
::/0 | All IPv6 addresses |
Common IPv4 subnet sizes:
/32- single IP (same as specifying the IP without a prefix)/24- 256 addresses (e.g.192.168.1.0/24)/16- 65,536 addresses (e.g.172.16.0.0/16)
Managing Rules
Section titled “Managing Rules”You can update or delete existing rules at any time. Changes take effect shortly after saving.
Each rule can have an optional comment to help you remember what the rule is for, which is especially useful when managing multiple rules.