A whitelist restricts access to your Time Series Database (TSDB) instance by IP address. Only clients with IP addresses or CIDR blocks listed in the whitelist can connect to the instance.
Prerequisites
Before you begin, ensure that you have:
A TSDB instance. See Create a TSDB instance
Configure the whitelist
Adding 0.0.0.0/0 to the whitelist allows access from any IP address. This poses a high security risk. Only add this entry if absolutely necessary.
Log on to the TSDB console.
In the upper-left corner of the page, select the region of the target instance.
Click Manage in the Actions column for the target instance.
On the Instance Details page, click Modify IP Address Whitelist.
In the dialog box that appears, enter the IP addresses or CIDR blocks to allow, then click OK.
After the whitelist is saved, it appears in the IP Address Whitelist section of the Instance Details page.
Supported IP formats
| Format | Description | Example |
|---|---|---|
| Single IP address | Enter the IP address directly. | 192.168.1.1 |
| CIDR block | Use CIDR notation. | 192.168.1.0/24 |
| Multiple entries | Separate addresses with commas. No spaces between entries. | 192.168.1.1,10.0.0.0/8 |
| Allow all access | Enter 0.0.0.0/0 to allow all IP addresses to access the instance. Not recommended. | 0.0.0.0/0 |
| Block all access | Enter 127.0.0.1 to block all IP addresses from accessing the instance. | 127.0.0.1 |