All Products
Search
Document Center

PolarDB:Configure whitelists

Last Updated:Mar 28, 2026

By default, a PolarDB-X instance only allows connections from 127.0.0.1, which blocks all external access. Add the IP addresses or Classless Inter-Domain Routing (CIDR) blocks of your application servers to grant access.

Limits and quotas

LimitValue
Whitelists per instance50
IP addresses and CIDR blocks per whitelist300
IPv6 supportNot supported
Time for changes to take effectApproximately 1 minute

Special IP values:

ValueEffect
127.0.0.1Blocks all connections
0.0.0.0/0Allows connections from all IP addresses (security risk — use with caution)

Prerequisites

Before you begin, ensure that you have:

  • A PolarDB-X instance

  • The public IP addresses or CIDR blocks of the servers that need database access

Add a whitelist

  1. Log on to the PolarDB-X console.

  2. In the top navigation bar, select the region where your instance is deployed.

  3. On the Instances page, click the PolarDB-X 2.0 tab.

  4. Find the instance and click its ID.

  5. In the left-side navigation pane, choose ConfigurationManagement > Safety management.

  6. On the Whitelist settings tab, click Add Whitelist.

  7. In the Add Whitelist panel, configure the following parameters.

    ParameterDescription
    Group NameA name for the whitelist group.
    Group WhitelistThe IP addresses or CIDR blocks to allow. Separate multiple entries with commas — for example, 192.168.0.1,192.168.0.0/24. Maximum 300 entries per whitelist.
  8. Click OK.

Modify a whitelist

  1. Log on to the PolarDB-X console.

  2. In the top navigation bar, select the region where your instance is deployed.

  3. On the Instances page, click the PolarDB-X 2.0 tab.

  4. Find the instance and click its ID.

  5. In the left-side navigation pane, choose ConfigurationManagement > Safety management.

  6. On the Whitelist settings tab, find the whitelist and click Configuration in the Operation column.

    456789

  7. In the Configure Whitelist panel, update the Group Whitelist field with the new IP addresses or CIDR blocks.

    ParameterDescription
    Group WhitelistThe updated IP addresses or CIDR blocks. You can enter IP addresses (for example, 192.168.0.1) and CIDR blocks (for example, 192.168.0.0/24). Separate multiple entries with commas — for example, 192.168.0.1,192.168.0.0/24. Maximum 300 entries per whitelist. To block all access, specify 127.0.0.1. To allow all access, specify 0.0.0.0/0 (security risk — use with caution).
  8. Click OK.

Delete a whitelist

  1. Log on to the PolarDB-X console.

  2. In the top navigation bar, select the region where your instance is deployed.

  3. On the Instances page, click the PolarDB-X 2.0 tab.

  4. Find the instance and click its ID.

  5. In the left-side navigation pane, choose ConfigurationManagement > Safety management.

  6. On the Whitelist settings tab, find the whitelist and click Delete in the Operation column.

    456789

  7. In the confirmation dialog, click OK.