All Products
Search
Document Center

ApsaraDB for ClickHouse:IP whitelist templates

Last Updated:Dec 24, 2025

You can use whitelist templates to apply the same IP whitelist to multiple ApsaraDB for ClickHouse Enterprise Edition clusters in the same region, reducing repetitive configuration and simplifying centralized management.

Limits

  • Only Enterprise Edition supports whitelist templates.

  • A single Alibaba Cloud account is limited to creating 100 whitelist templates in the same region.

  • A single whitelist template can be associated with a maximum of 200 clusters.

  • A single cluster can be associated with a maximum of 5 whitelist templates.

  • A single whitelist template can contain a maximum of 1,000 IP addresses.

  • IP whitelist template feature is not available in the US (Silicon Valley) or US (Virginia) regions.

Notes

  • Changes to a whitelist template take effect immediately. Modifying or deleting a whitelist template will directly affect the IP whitelists of associated clusters. Please confirm the impact scope before making changes and proceed with caution.

  • A whitelist template can only be associated with clusters in the same region.

Procedure

Create a whitelist template

  1. Log on to the ApsaraDB for ClickHouse console. In the upper-left corner of the page, select the region where your cluster is located.

  2. In the navigation pane on the left, choose IP Whitelist Templates.

  3. Click Create IP Whitelist Template.

  4. In the Create IP Whitelist Template panel, enter an IP Whitelist Template Name and the IP Addresses in Whitelist. Then, click OK.

Associate a whitelist template

You can associate a whitelist template via a single cluster's detail page or with multiple clusters in bulk from the template page.

  • Associate with a single cluster

    1. Log on to the ApsaraDB for ClickHouse console. In the upper-left corner of the page, select the region where your cluster is located.

    2. In the navigation pane on the left, choose Clusters. Click the Enterprise Edition Clusters tab, and then click the target cluster to go to its detailed page.

    3. In the navigation pane on the left, click Data Security.

    4. Click Associate Whitelist Template.

    5. In the dialog box that appears, select the target whitelist template and click OK.

  • Associate with multiple clusters in a batch

    1. Log on to the ApsaraDB for ClickHouse console. In the upper-left corner of the page, select the region where your cluster is located.

    2. In the navigation pane on the left, choose IP Whitelist Templates.

    3. In the row of the target whitelist template, click Modify in the Actions column.

    4. In the dialog box that appears, modify the Associated Instances and click OK.

Modify a whitelist template

  1. Log on to the ApsaraDB for ClickHouse console. In the upper-left corner of the page, select the region where your cluster is located.

  2. In the navigation pane on the left, choose IP Whitelist Templates.

  3. In the row of the target whitelist template, click Modify in the Actions column.

  4. Modify the IP Addresses in Whitelist or Associated Instances, and then click OK.