Help Center/ Anti-DDoS Service/ User Guide/ CNAD Advanced (CNAD) Operation Guide/ Adding a Protection Policy/ Blocking or Permitting Traffic From Specified IP Addresses Using a Blacklist and Whitelist
Updated on 2024-12-24 GMT+08:00

Blocking or Permitting Traffic From Specified IP Addresses Using a Blacklist and Whitelist

You can configure an access control list to control access to your IP addresses.

Limitations and Constraints

A maximum of 200 IP addresses can be added to the access control list for each policy.

Adding an IP Address to the Blacklist or Whitelist

  1. Log in to the management console.
  2. Select a region in the upper part of the page, click in the upper left corner of the page, and choose Security & Compliance > Anti-DDoS Service. The Anti-DDoS Service Center page is displayed.
  3. In the navigation pane on the left, choose Cloud Native Anti-DDoS Advanced > Protection Policies. The Protection Policies page is displayed.
  4. Click Create Protection Policy.
  5. In the displayed dialog box, set the policy name, select an instance, and click OK.

    Figure 1 Creating a policy

  6. In the row containing the target policy, click Set Protection Policy in the Operation column.
  7. In the IP Blacklist/Whitelist area, click Set.

    Figure 2 IP Blacklist/Whitelist

  8. On the displayed Set IP Blacklist/Whitelist page, choose Blacklist or Whitelist and click Add.

    Figure 3 Add IP Address

  9. Enter the IP addresses or IP address ranges, and click OK.

    Figure 4 Adding blacklist IP addresses
    Figure 5 Adding whitelist IP addresses

Related Operations

  • On the blacklist tab, click Delete in the Operation column of a target IP address or select IP addresses to be deleted in batches, and click Delete above the list. Access from the deleted IP addresses will not be blocked.
  • On the whitelist tab, click Delete in the Operation column of a target IP address or select IP addresses to be deleted in batches, and click Delete above the list. Access from the deleted IP addresses will not be directly allowed.