IP Access
Restrict who can reach your application with IP allowlists.
An IP access profile is an allowlist of IP ranges that are permitted to reach your applications. Link a profile to an app to limit its public ports to known networks, such as your office or VPN.
An allowlist that does not include your own IP will lock you out of the app. Add your current IP (or your office or VPN range) before you link a profile.
Create a Profile
On the IP access page under Settings, create a profile with a name and an optional
description, then add rules. Each rule is a CIDR range (IPv4 or IPv6), such as
203.0.113.0/24, with an optional note. Ranges must be unique within a profile.
Link to Applications
Link a profile to any application in your team. One profile can cover many apps, and an app can have several profiles, whose ranges are combined. Once linked, only traffic from the allowed ranges can reach the app's public ports.
Things to Know
- Profiles are allow lists only. There is no deny or block list.
- A profile with no rules does not restrict anything.
- A profile that is linked to an app cannot be deleted. Unlink it everywhere first.