If you need to access a Managed Service for Grafana workspace over the internet, you must add the IP addresses of your hosts to the IP address whitelist of the workspace. A public IP address whitelist restricts access to only the IP addresses and CIDR blocks you specify.
After you configure a whitelist, any host whose IP address is not included loses access to the workspace. Add the IP addresses of all users and systems that need to connect before you save.
Prerequisites
Before you begin, make sure that you have:
A Managed Service for Grafana workspace
The public IP addresses or CIDR blocks of the hosts that need access
Configure the whitelist
- Log on to the .
- Log on to the Managed Service for Grafana console. In the left-side navigation pane, click Workspace Management.
- On the Workspace Management page, click the ID of the workspace that you want to manage.
- In the left-side navigation pane, click Whitelists and Security Groups.
- On the Public IP Address Whitelist tab page, click Modify to the right of General Whitelist.
- In the Modify General Whitelist dialog box, enter IP addresses or CIDR blocks in the Whitelist field. Separate multiple entries with commas (,). Examples:
192.168.0.1,192.168.0.0/24. The following special values are available:ImportantSetting the whitelist to
127.0.0.1blocks all public access to the workspace. Use this value only to disable internet access entirely.Value Effect 0.0.0.0/0Allow access from all IPv4 addresses 127.0.0.1Deny access from all IPv4 addresses - Click OK.
Verify the configuration
After you save the whitelist, verify that it works as expected:
From a host whose IP address is on the whitelist, open the Grafana workspace URL in a browser and confirm that the workspace loads.
(Optional) From a host whose IP address is not on the whitelist, try to access the workspace and confirm that the connection is blocked.