Ensure only Trusted IP Addresses are Allowed to Connect to An Instance
Use a system property to define a list of IP ranges that are appended to the outbound IP allow list.
Use the glide.custom.ip.authenticate.allow system property to define a list of IP ranges that are appended to the inbound IP allow list of an instance. The property value contains a comma separated range of IP addresses in IPv4 or IPv6 format. IP ranges are specified using a hyphen (10.0.10.14-10.0.10.19), using CIDR notation (10.0.10.0/24), or consist of a single IP address (10.0.10.5). IP ranges in this property will be allowed to connect to an instance, unless listed in the IP deny list.
IP ranges in this property are appended to the inbound IP allow list regardless of the value of the glide.ip.authenticate.strict property. The IP Address Access Controls [ip_access] table provides an equivalent option to add to both the inbound/outbound allow/deny IP lists of an instance. Refer to the Steps to Configure section in IP range based authentication.
Ensure that the glide.custom.ip.outbound.authenticate.allow system property value is either an empty, or a comma-separated list containing only trusted IP ranges that your want to allow your instance to access.
More information
| Attribute | Description |
|---|---|
| Configuration name | glide.custom.ip.authenticate.allow |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | String |
| Recommended value | Empty, or a comma-separated list containing only trusted IP ranges that your want to allow your instance to access. |
| Default value | None |
| Fallback value | None |
| Category | Architecture, design, and threat modeling |
| Security risk | - Severity score: 4.3 - CVSS score: Medium - Security risk details: |
| Functional impact | None |
| Dependencies and prerequisites | None |
Parent Topic:Architecture, design, and threat modeling