IP Allowlists
Restrict your app's public ports to known networks, such as your office or VPN, with IP allowlists of IPv4 and IPv6 CIDR ranges.
An IP access profile is an allowlist of IP ranges that are permitted to reach your applications. Link a profile to an app to limit its public ports to known networks, such as your office or VPN.
An allowlist that does not include your own IP will lock you out of the app. Add your current IP (or your office or VPN range) before you link a profile.
Create a Profile
On the IP access page in the sidebar, create a profile with a name and an optional
description, then add rules. Each rule is a CIDR range (IPv4 or IPv6), such as
203.0.113.0/24, with an optional note. Ranges must be unique within a profile.
Link to Applications
Link a profile to any application in your team. One profile can cover many apps, and an app can have several profiles, whose ranges are combined. Once linked, only traffic from the allowed ranges can reach the app's public ports.
Things to Know
- Profiles are allow lists only. There is no deny or block list.
- A profile with no rules does not restrict anything.
- A profile that is linked to an app cannot be deleted. Unlink it everywhere first.
Related
Browser Terminal
Open a live shell inside a running instance of your app from the console to inspect files, check processes, or run a one off command.
Registry Credentials
Store a login for Docker Hub, GHCR, GitLab, Quay, Amazon ECR, or Azure once per team so Out Plane can pull your private container images.