Whitelist management

Overview

You can configure an IP address whitelist for specific services on an Message Queue for Confluent instance.

If the IP address whitelist is empty, the instance accepts connections from all IP addresses.

After you configure an IP address whitelist, only clients with IP addresses on the whitelist can connect to the Message Queue for Confluent instance.

Usage notes

• You can configure an IP address whitelist for a Message Queue for Confluent instance only after you enable public access.

• The services that support IP address whitelists include CONNECTOR, CONTROL_CENTER, KAFKA, and SCHEMA_REGISTRY.

• Removing an IP address from the whitelist prevents the corresponding client from connecting to the specified service on the Message Queue for Confluent instance. Proceed with caution.

Add IPs to a whitelist

1. Log on to the ApsaraMQ for Confluent console. In the left-side navigation pane, click Instances.

2. On the Instances page, click the name of the instance that you want to manage.

3. On the Instance Details page, click Whitelists in the left navigation pane.

4. Click the tab for the desired service, and then choose one of the following methods to add IP addresses to the whitelist.

   Single entry

   1. On the Whitelists page, click Add IP Address to Whitelist.

   2. In the Add IP Address to Whitelist panel, set the following parameters and click OK.

      • Policy Name: Enter a policy name.

      • IP Address Whitelist: Enter a single IP address or an IP address range.

   Multiple entries

   1. On the Whitelists page, click Batch Add Entries to Whitelist.

   2. In the Batch Add Entries to Whitelist panel, enter the configuration in the following format and click OK.

      • Enter each entry on a new line.

      • For each entry, separate the IP address or address range from the policy name with a vertical bar (|). For example: 192.168.1.0/24|PolicyName.

      • You can add up to 50 entries at a time.

View the whitelist

On the Whitelists page, click the tab for the desired service to view its IP address whitelist.

Delete a whitelist policy

1. On the Whitelists page, click the tab for the desired service.

2. In the policy list, find the policy you want to delete and click Delete in the Actions column.

3. In the Delete dialog box, click OK.

References

Access links and ports