PolarDB:Configure whitelists

Note

• After you create a database in your PolarDB-X instance, the default whitelist contains only the 127.0.0.1 IP address. In this case, no IP addresses can access the database. To ensure that your data is secure, we recommend that you specify only the public IP addresses or CIDR blocks of your web servers in the whitelists of your instance.

• You can create up to 50 whitelists for a PolarDB-X instance, and each whitelist can contain up to 300 IP addresses and CIDR blocks.

Add a whitelist

1. Log on to the PolarDB for Xscale console.

2. In the top navigation bar, select the region where the target instance is located.

3. On the Instances page, click the PolarDB-X 2.0 tab.

4. Find the target instance and click its ID.

5. In the left-side navigation pane, choose ConfigurationManagement > Safety management.

6. On the Whitelist settings tab, click Add Whitelist.

7. In the Add Whitelist panel, configure the parameters.

   Parameter	Description
   Group name	Specify a name for the whitelist.
   Whitelist in group	Specify IP addresses. Note You can enter IP addresses and CIDR blocks. For example, you can enter the 192.168.0.1 IP address and the 192.168.0.0/24 CIDR block. You can specify up to 300 IP addresses and CIDR blocks in a whitelist. Separate multiple IP addresses and CIDR blocks with commas (,). For example, you can enter 192.168.0.1,192.168.0.0/24. If you want to block access from all IP addresses, you can specify 127.0.0.1 in the whitelist. PolarDB-X supports filling in an IP address of 0.0.0.0/0, which is open to all IP addresses. Set to 0.0.0.0/0 has a security risk, please use it carefully.

8. Click OK.

   Note

   The whitelist takes effect approximately 1 minute after it is created.

Modify a whitelist

1. Log on to the PolarDB for Xscale console.

2. In the top navigation bar, select the region where the target instance is located.

3. On the Instances page, click the PolarDB-X 2.0 tab.

4. Find the target instance and click its ID.

5. In the left-side navigation pane, choose ConfigurationManagement > Safety management.

6. On the Whitelist settings tab, find the whitelist that you want to modify and click Config in the Operation column.

   

7. In the Configure whitelist panel, update the IP addresses or CIDR blocks in the Whitelist in group field.

   Parameter

   Description

   Whitelist in group

   Update the IP addresses or CIDR blocks. Note You can enter IP addresses and CIDR blocks. For example, you can enter the 192.168.0.1 IP address and the 192.168.0.0/24 CIDR block. You can specify up to 300 IP addresses and CIDR blocks in a whitelist. Separate multiple IP addresses and CIDR blocks with commas (,). For example, you can enter 192.168.0.1,192.168.0.0/24. If you want to block access from all IP addresses, you can specify 127.0.0.1 in the whitelist. PolarDB-X supports filling in an IP address of 0.0.0.0/0, which is open to all IP addresses. Set to 0.0.0.0/0 has a security risk, please use it carefully.

8. Click OK.

   Note

   The whitelist modification takes effect after approximately 1 minute.

Delete a whitelist

1. Log on to the PolarDB for Xscale console.

2. In the top navigation bar, select the region where the target instance is located.

3. On the Instances page, click the PolarDB-X 2.0 tab.

4. Find the target instance and click its ID.

5. In the left-side navigation pane, choose ConfigurationManagement > Safety management.

6. On the Whitelist settings tab, find the whitelist that you want to delete and click Delete in the Operation column.

   

7. In the message that appears, click OK.