HTTP Authorization by IP

IP Authorization checks client IP address in the rules list.

When to Use

Use IP rules to open a channel to your own network, block one address, or let a trusted network skip the other methods.

1. Open Settings → Authorizers and create an authorizer with the IP method.
2. Add rules in the format action address, as in the examples below.
3. Select the authorizer in the properties of the channel.

Caution

A client that matches no rule is passed to the next method. If there is no next method and no default action, access is allowed. See Priority.

Actions

• allow: allow access
• deny: deny access
• pass: pass to the next authorization method

Addresses

IP Authorization supports IPv4 and IPv6 addresses with CIDR notation.

Example

• allow 127.0.0.1 - allow request from localhost
• deny 192.168.0.100 - deny access to single address
• pass 192.168.0.0/24 - pass client from the IPv4 network to the next authorizer - securetoken or backend
• pass fd32:ce04:8a5c::1/64 - same for IPv6 network