Updated on 2025-07-25 GMT+08:00

Access Control

You can use access control to specify the IP addresses that are allowed or denied to access a listener.

Access Control Policies

All IP addresses is selected for access control by default.

You can select Whitelist or Blacklist as needed.
  • Whitelist: Only IP addresses in the whitelist can access the listener. Only requests from the IP addresses or CIDR blocks specified in the IP address group will be forwarded by the listener.

    Access control policies only take effect for new connections, but not for existing ones. If a whitelist is configured for a listener but IP addresses that are not in the whitelist can access the backend server associated with the listener, it may be caused by a persistent connection between the client and the backend server. To deny IP addresses that are not in the whitelist from accessing the listener, the persistent connection between the client and the backend server needs to be disconnected.

  • Blacklist: IP addresses in the blacklist are not allowed to access the listener. Requests from the IP addresses or CIDR blocks specified in the IP address group will not be forwarded by the listener.