Help Center/ Elastic Load Balance/ User Guide/ User Guide for Shared Load Balancers/ Security/ Access Control/ IP Address Group
Updated on 2026-07-09 GMT+08:00
View PDF

IP Address Group

What Is an IP Address Group?

An IP address group is a collection of IP addresses that have the same security requirements or need to be modified frequently. You can use an IP address group to manage these IP addresses easier.

If you want to use a whitelist or blacklist for access control, you must select an IP address group.

  • Whitelist: Only IP addresses in the IP address group can access the listener. If the IP address group does not contain any IP address and you have selected a whitelist for access control, no IP addresses can access the listener.
  • Blacklist: IP addresses in the IP address group are denied to access the listener. If the IP address group does not contain any IP address and you have selected a blacklist for access control, all IP addresses can access the listener.

Constraints

  • By default, you can create a maximum of 50 IP address groups.
  • An IP address group can be associated with a maximum of 50 listeners.

Creating an IP Address Group

  1. Go to the load balancer list page.
  2. In the navigation pane on the left, choose Elastic Load Balance > IP Address Groups.
  3. On the displayed page, click Create IP Address Group.
  4. Configure the parameters based on Table 1.
    Table 1 Parameters required for creating an IP address group

    Parameter

    Description

    Example Value

    Name

    Specifies the name of the IP address group.

    ipGroup-01

    Enterprise Project

    Specifies an enterprise project by which cloud resources and members are centrally managed. For details, see the Enterprise Management User Guide.

    N/A

    IP Addresses

    Specifies IPv4 or IPv6 IP entries that will be added to the whitelist or blacklist for access control.

    You can manually specify IP entries or import IP entries in batches.
    • When you manually specify IP entries, note the following:
      • Each entry contains a single IP address, a CIDR block, or an IP address range, and ends with a line break.
      • You can add remarks at the end of each IP address or CIDR block and separate them with a vertical bar (|). The remarks can be up to 255 characters long. Angle brackets (<>) are not allowed.
      • You can add a maximum of 300 entries (including IP addresses, CIDR blocks, and IP address ranges) to each IP address group.
    • When you import IP entries in batches, note the following:
      • A maximum of 300 records can be imported. If you try to import more records than that, the import will fail.
      • Duplicate data records cannot be imported.
      • Only .xlsx files with a maximum size of 500 KB can be imported.
    • Without remarks: 10.168.2.24
    • With remarks: 10.168.16.0/24 | ECS01

    Description

    Provides supplementary information about the IP address group.

    N/A
  5. Click OK.

Managing IP Addresses in an IP Address Group

After an IP address group is created, you can manage the IP addresses in an IP address group as required:

The IP addresses can be in the following formats:

  • Each line must contain an IP address or a CIDR block and end with a line break.
  • You can add remarks at the end of each IP address or CIDR block and separate them with a vertical bar (|), for example, 192.168.10.10 | ECS01. The remarks can be up to 255 characters long. Angle brackets (<>) are not allowed.
  • You can add a maximum of 300 entries (including IP addresses and CIDR blocks) to each IP address group.

You can add IP addresses to an existing IP address group.

  1. Go to the load balancer list page.
  2. In the navigation pane on the left, choose Elastic Load Balance > IP Address Groups.
  3. On the IP Address Groups page, locate the target IP address group and click its name.
  4. In the lower part of the displayed page, choose the IP Addresses tab and click Add IP Addresses. On the Add IP Addresses page, add IP addresses.
  5. Click OK.

You can perform the following steps to change all IP addresses in an IP address group:

  1. Go to the load balancer list page.
  2. In the navigation pane on the left, choose Elastic Load Balance > IP Address Groups.
  3. On the IP Address Groups page, you can:
    1. Modify the basic information and change IP addresses of an IP address group:
      1. Locate the target address group, click Modify in the Operation column. You can modify the name and description of an IP address group, and change all its IP addresses.
      2. Click OK.
    2. Only change IP addresses:
      1. Locate the target IP address group and click its name.
      2. In the lower part of the displayed page, choose the IP Addresses tab, click Change IP Addresses, and change IP addresses as you need.
      3. Click OK.

If you want to delete IP addresses in batches from an IP address group, see Changing IP Addresses.

To delete an IP address from an IP address group, perform the following operations:

  1. Go to the load balancer list page.
  2. In the navigation pane on the left, choose Elastic Load Balance > IP Address Groups.
  3. On the IP Address Groups page, locate the target IP address group and click its name.
  4. In the IP address list, locate the IP address you want to delete and click Delete in the Operation column.
  5. Confirm the information and click OK.

Viewing the Details of an IP Address Group

You can view the details of an IP address group, including:

  • Name, ID, and creation time
  • IP addresses and CIDR blocks
  • Associated listeners
  1. Go to the load balancer list page.
  2. In the navigation pane on the left, choose Elastic Load Balance > IP Address Groups.
  3. On the IP Address Groups page, locate the target IP address group and click its name.
  4. View the basic information about the IP address group.
    1. On the IP Addresses tab, view the IP addresses or CIDR blocks.
    2. On the Associated Listeners tab, view the listeners associated with the IP address group.

Deleting an IP Address Group

If an IP address group is used for controlling access to a listener, it cannot be deleted.

You can view the listeners associated with an IP address group by referring to Viewing the Details of an IP Address Group. For details about how to disassociate an IP address group from a listener, see Configuring Access Control.

  1. Go to the load balancer list page.
  2. In the navigation pane on the left, choose Elastic Load Balance > IP Address Groups.
  3. On the IP Address Groups page, locate the IP address group and click Delete in the Operation column.
  4. Click OK.
Parent Topic: Access Control