Skip to content

Whitelist an IP address for a DBaaS instance

View as Markdown

Whitelist the IP addresses your clients connect from, so that only those addresses can reach the DBaaS instance’s Endpoint. A whitelist helps block brute-force password and denial-of-service attacks from unknown servers. Until you add an address, any IP address with valid credentials can connect.

You need a DBaaS instance that reads Running, and the public IP address each client connects from.

  1. On the DBaaS instance’s Whitelisted IP tab, click Add Whitelisted IP.
  2. Enter a valid IPv4 or IPv6 address in IP Address.
  3. (Optional) In Select Tags, choose one or more of your tags to identify the entry.
  4. Click Submit.

From then on, only the listed addresses can connect to the Endpoint.

Removing the last entry opens the DBaaS instance to any IP address again.

  1. On the DBaaS instance’s Whitelisted IP tab, click Remove IP on the entry’s row.
  2. Click Remove.

While other entries remain, the removed address loses access to the Endpoint.

To change an address, add the new one first, then remove the old one, so that the whitelist keeps at least one address throughout.

With the whitelist set, connect from one of the listed addresses; see Connect to a DBaaS instance. If a listed address still cannot connect, see Troubleshooting DBaaS.