IP Filtering

Go to "Side Menu"– "Config and Monitoring"– "Security".

You can restrict the client IPs that can access the application deployed in the execution environment. IP filtering is performed in a white list fashion. An accessible IP address can be specified in the following way, and the sum of the specified contents will be the accessible IP address.

• Allowed countries
• Allowed global IPs (IPv4/Ipv6)

Note

IP filtering function is not available on the Free Plan.

Setup procedure

1. Click on the "Security" menu in the Execution Environment Monitoring screen.
2. Click the “ADD” link under "WHITELIST IP - FILTERS & POLICY".
3. A dialog box will appear, in which you can directly specify the application ID, country, or IP address of the IP address target.
4. Click the "ADD" button in the dialog.
5. Click the "SAVE" button.

Note

• When specifying an IP address, use CIDR notation.
• If the Application ID is set to an empty setting, it will be set for the domain.
• If country and IP address (IPv4/IPv6) are all set to blank, registration is not possible.
• To update the settings, click [Edit] on the context menu of the table row to update the settings. After updating, be sure to click the "Save" button.
• To delete a setting, click on "Delete" in the context menu of the table row. After deleting, be sure to click the "Save" button.
• Maximum number of records to be registered is as follows:
  • Designation for application: 5
  • Designation for domain: 1
• The number of global IP addresses that can be added to a registration record is 10000 for each IPv4 and IPv6.
• Registration record settings do not affect the order in which they are set or each other.

Setting example

The following is an example of IP filtering settings.

App ID	Country	IPv4	IPv6
App_001	Japan, India	36.3.80.0/20
App_002		36.3.80.0/20
App_003	Japan, India	36.3.80.0/20	2620:0000:02d0:0200:0000:0000:0000:0000/64
	United States

In case of application "App_001"

• Access is possible when the access source is IPv4 from “36.3.80.0/20”.
• Access is possible when the access source is IPv6 and the access is from Japan or India.
• Access is not possible if the accessing source is not from Japan or India (e.g., the U.S.).

In the case of "App_002"

• Access is possible only from “36.3.80.0/20” with IPv4 as the access source

In the case of "App_003"

• Access is possible when the access source is IPv4 and the access is from “36.3.80.0/20”.
• Access possible if the access source is IPv6 and the access source is “2620:0000:02d0:0200:0000:0000:0000:0000:0000/64”.
• Access is available from Japan or India, except for the specified IP address.

When the application is not "App_001", "App_002", "App_003"

• Access is possible if the accessing source is from the U.S.
• Access is disabled if the accessing source is not from the U.S. (e.g., Japan, India).