PolarDB:Configure whitelists

Usage notes

• After an instance is created, its default whitelist group contains only the IP address 127.0.0.1. This setting blocks all external IP addresses from accessing the database. For optimal security, add only the public IP addresses or CIDR blocks of your application servers to the whitelist.

• You can create up to 50 whitelist groups. Each whitelist group can contain up to 300 IP addresses or CIDR blocks.

• IPv6 addresses are not supported.

Add a whitelist group

1. Log on to the PolarDB-X console.

2. In the top navigation bar, select the region where the instance is deployed.

3. On the Instances page, click the PolarDB-X 2.0 tab.

4. Find the instance that you want to manage and click its ID.

5. In the left-side navigation pane, click Configuration and Management > Security Management.

6. On the Whitelists tab, click Add Whitelist in the upper-left corner.

7. In the Add Whitelist panel, configure the following parameters.

   Parameter	Description
   Group Name	Enter a name for the whitelist group.
   Group Whitelist	Enter the IP addresses. Note You can enter IP addresses, such as 192.168.0.1, or CIDR blocks, such as 192.168.0.0/24. Each whitelist group can contain up to 300 IP addresses or CIDR blocks. Separate multiple IP addresses with commas (,), for example, 192.168.0.1,192.168.0.0/24. Entering only 127.0.0.1 prevents access from any external IP address. PolarDB-X allows you to enter 0.0.0.0/0 to grant access from all IP addresses. This setting poses a security risk. Use it with caution.

8. Click OK.

   Note

   Changes to a whitelist take about one minute to take effect.

Modify a group whitelist

1. Log on to the PolarDB-X console.

2. In the top navigation bar, select the region where the instance is deployed.

3. On the Instances page, click the PolarDB-X 2.0 tab.

4. Find the instance that you want to manage and click its ID.

5. In the left-side navigation pane, click Configuration and Management > Security Management.

6. On the Whitelists tab, find the target whitelist group, and then click Configuration in the Actions column.

7. In the Configure Whitelist panel, modify the Group Whitelist.

   Parameter

   Description

   Group Whitelist

   Enter the IP addresses. Note You can enter IP addresses, such as 192.168.0.1, or CIDR blocks, such as 192.168.0.0/24. Each whitelist group can contain up to 300 IP addresses or CIDR blocks. Separate multiple IP addresses with commas (,), for example, 192.168.0.1,192.168.0.0/24. Entering only 127.0.0.1 prevents access from any external IP address. PolarDB-X allows you to enter 0.0.0.0/0 to grant access from all IP addresses. This setting poses a security risk. Use it with caution.

8. Click OK.

   Note

   Changes to a whitelist take about one minute to take effect.

Delete a whitelist group

1. Log on to the PolarDB-X console.

2. In the top navigation bar, select the region where the instance is deployed.

3. On the Instances page, click the PolarDB-X 2.0 tab.

4. Find the instance that you want to manage and click its ID.

5. In the left-side navigation pane, click Configuration and Management > Security Management.

6. On the Whitelists tab, find the target whitelist group, and then click Delete in the Actions column.

7. In the dialog box that appears, click OK.