Updated on 2024-04-17 GMT+08:00

Adding an IP Address Group

With IP address groups, you can quickly add IP addresses or IP address ranges to a blacklist or whitelist rule.

If you have enabled enterprise projects, you can select your enterprise project from the Enterprise Project drop-down list and add IP address/range groups in the project.


You have purchased WAF.


  • For dedicated and ELB-accessed cloud WAF instances, if the load balancers they use support IPv6 addresses, those WAF instances also support IPv6 addresses or IPv6 address ranges.

Specification Limitations

  • A maximum of 100 address groups can be created. You can add multiple IP addresses or IP address ranges to an address group. You can use commas (,), semicolons (;), carriage returns (Enter), tab characters (Tab), or spaces to separate IP addresses or IP address ranges.
  • Before adding an address group to a blacklist or whitelist rule, ensure that your IP address blacklist and whitelist rule quota has not been used up.


  1. Log in to the management console.
  2. Click in the upper left corner of the management console and select a region or project.
  3. Click in the upper left corner and choose Web Application Firewall under Security & Compliance.
  4. In the navigation pane on the left, choose Objects > Address Groups.
  5. Click the My Address Groups tab.
  6. On the upper left of the address group list, click Add Address Group.
  7. In the displayed Add Address Group dialog box, enter an address group name and provide IP addresses/IP address ranges.

    Figure 1 Add Address Group

  8. Click Confirm.