Allowlist an IP range

Transcript

In order to connect to a server, either through a client application or an API, you must set up a public SSH key, and also add the IP address that connects to your SFTP server to the allow list. In this video, I will explain how you can add an IP address range to the allow list in the control panel. Navigate to the control panel, then to the SFTP section, and to the IP allow listing tab.

On this tab, you can see all IP ranges that are on the allow list for the instance you have selected from the drop down on the top.

To add a new IP range, click on the button. Select the instances you would like to add the IP range to. You can add an IP address or range to one or more instances at the same time. We recommend that you add an IP range, rather than a single IP address to the allow list. It is also recommended to limit the range to less than 265 IP addresses.

Next, we need to add the IP address or the range. It needs to be in classless inter-domain routing, and short, CIDR format, and the addresses need to be public.

The syntax consists of an IP address, followed by a forward slash character and a decimal number. For example, if you do want to add a single address, you will need to append it with /32. That will indicate that the range only includes a single IP address.

Also be aware that the control panel will reject any CIDR format ranges between /zero and /23. Please refer to the product documentation for more details on the format of the syntax. There are also tools available online, if you need to convert your IP address to CIDR format.

Once you have added the address, add a label and save. The system is now processing the request. Now you can see that the IP range has been added to the allow list for all instances I selected. So for this one, as well as this one.

Now you are all set. And if you are in the process of setting up an SFTP connection, the next step would be to add a public key. I will cover this step in a separate video. And good housekeeping is to delete any IP address or range that is not being used anymore. To do this, check the IP address that you would like to remove. You can see the button has changed, and now you can click on the delete button and it will delete the address.

Thank you for watching. -