Lindorm blocks all external access to instances by default. Add the IP addresses of your clients to a whitelist before connecting to a Lindorm instance. Keep whitelists up to date on a regular basis.
Preparation
Before you configure a whitelist for a Lindorm instance, obtain the client IP address to add based on the location of the client.
Client location | Network type used for the connection | How to obtain the client IP address |
(Recommended) ECS instance | VPC | Query the IP address of an ECS instance Note The ECS instance and the Lindorm instance must belong to the same virtual private cloud (VPC). |
On-premises | Internet | Choose one of the following methods based on the operating system of the on-premises device:
|
Procedure
Setting the IP CIDR block to 0.0.0.0/0 allows all IP addresses to access the Lindorm instance. In this case, Lindorm faces a high security risk. Therefore, do not add 0.0.0.0/0 to the whitelist.
Log on to the Lindorm console.
In the upper-left corner of the page, select the region where the instance is deployed.
On the Instances page, click the ID of the target instance or click View Instance Details in the Actions column for the instance.
In the left-side navigation pane, click Access Control.
Click Create Whitelist.
In the Create Whitelist dialog box, set Whitelist Name and Whitelist.
ImportantThe group name supports only English letters, digits, and underscores.
The following formats of IP addresses or CIDR blocks are supported.
A single IP address. Example: 192.0.XX.XX.
IP CIDR blocks in CIDR mode (Classless Inter-Domain Routing). Example: 192.0.XX.XX/24, where /24 indicates the prefix length. The range is [1, 32].
Multiple IP addresses or CIDR blocks are separated by commas (,).
Setting the IP address to 127.0.0.1 disallows all IP addresses from accessing the Lindorm instance.
Click OK.
You can then click Modify Group in the Actions column of the target Whitelist Name to modify the existing whitelist IP addresses. You can also create a new group whitelist to manage different whitelist IP addresses.