If you need to configure the same IP whitelist for multiple ApsaraDB for ClickHouse Enterprise Edition clusters, you can use the IP whitelist template feature. This feature allows you to centrally define IP rules and quickly apply them to multiple clusters in the same region. This reduces repetitive configuration and simplifies subsequent centralized changes and unified management.
Limitations
-
IP whitelist templates apply only to ApsaraDB for ClickHouse Enterprise Edition clusters.
-
You can create a maximum of 100 templates per account in each region.
-
An IP whitelist template can be associated with up to 200 clusters.
-
A cluster can be associated with up to 5 IP whitelist templates.
-
An IP whitelist template can contain up to 1,000 IP addresses.
-
This feature is unavailable in the US (Silicon Valley) and US (Virginia) regions.
Usage notes
-
Changes to an IP whitelist template take effect immediately. Modifying or deleting an IP whitelist template directly affects the accessible IP range for all associated clusters. Before you make changes, confirm the potential impact and proceed with caution.
-
An IP whitelist template can be associated only with clusters in the same region.
Procedure
Create an IP whitelist template
-
Log on to the ApsaraDB for ClickHouse console. In the top-left corner of the page, select the region where your clusters are located.
-
In the navigation pane on the left, click IP Whitelist Templates.
-
Click Create IP Whitelist Template.
-
In the Create IP Whitelist Template panel, enter an IP Whitelist Template Name and the IP Addresses, and then click OK.
Associate an IP whitelist template
You can associate an IP whitelist template with a single cluster from its details page or with multiple clusters at once from the IP Whitelist Templates page.
-
From the cluster details page
-
Log on to the ApsaraDB for ClickHouse console. In the top-left corner of the page, select the region of the cluster.
-
In the navigation pane on the left, click Clusters. Click the Enterprise Edition Clusters tab, and then click the target cluster.
-
In the navigation pane on the left, click Data Security.
-
Click Associate Whitelist Template.
-
In the dialog box, select the target IP whitelist template and click OK.
-
-
From the IP Whitelist Templates page
-
Log on to the ApsaraDB for ClickHouse console. In the top-left corner of the page, select the region of the clusters.
-
In the navigation pane on the left, click IP Whitelist Templates.
-
In the row for the target IP whitelist template, click Modify in the Actions column.
-
In the dialog box, modify the Associate Instance and click OK.
-
Modify an IP whitelist template
-
Log on to the ApsaraDB for ClickHouse console. In the top-left corner of the page, select the region where your clusters are located.
-
In the navigation pane on the left, click IP Whitelist Templates.
-
In the row for the target IP whitelist template, click Modify in the Actions column.
-
Modify the IP Addresses or Associate Instance, and then click OK.