Configure an IP whitelist

Whitelist configuration methods

Add an ECS private IP to a whitelist

If your ECS and Tair instances are in the same VPC, connect over the VPC.

1. Log on to the console and go to the Instances page. In the top navigation bar, select the region in which the instance that you want to manage resides. Then, find the instance and click the instance ID.

2. In the left-side navigation pane, click Whitelist Settings.

3. In the default whitelist group, click Modify.

   Note

   You can also click Add Whitelist to create a group. The name must be 2–32 characters: lowercase letters, digits, and underscores (_). It must start with a lowercase letter and end with a lowercase letter or a digit.

4. For Add Method, select Import ECS Internal IP Address. This displays the private IPs of ECS instances in the same region.

   Hover over an IP address to view the ID and name of the associated ECS instance.

5. Select the required IP addresses and move them to the box on the right.

6. Click OK.

7. Optional: To remove all IP addresses from a whitelist group, click Delete to the right of the target whitelist group.

   You cannot delete system-generated whitelist groups, such as default and hdm_security_ips.

Add a public IP to a whitelist

To connect from a local device or from an ECS instance in a different VPC, add the public IP address to a whitelist.

1. Log on to the console and go to the Instances page. In the top navigation bar, select the region in which the instance that you want to manage resides. Then, find the instance and click the instance ID.

2. In the navigation pane on the left, click Whitelist Settings.

3. In the default whitelist group, click Modify.

   Note

   You can also click Add Whitelist to create a group. The name must be 2–32 characters: lowercase letters, digits, and underscores (_). It must start with a lowercase letter and end with a lowercase letter or a digit.

4. For Add Method, select Add Manually.

5. In the Whitelist text box, enter the IP addresses or CIDR blocks.

   How to find the public IP address of an ECS instance or a local device

   Category	Method
   ECS instance	How do I find the IP address of an ECS instance?
   Local device	Use the following commands to find your public IP: Linux: Open a terminal and run the curl ifconfig.me command. Windows: Open Command Prompt and run the curl ip.me command. macOS: Open a terminal and run the curl ifconfig.me command.

   Separate multiple IP addresses with commas (,). Up to 1,000 unique addresses are supported. Formats:

   • A specific IP address, for example, 10.23.12.24.

   • A CIDR block in CIDR notation. For example, 10.23.12.0/24 represents the IP address range from 10.23.12.0 to 10.23.12.255. The prefix length must be an integer from 1 to 32.

   Warning

   Adding 0.0.0.0/0 allows access from any IP address, which poses a significant security risk. Use with caution.

6. Click OK.

7. Optional: To remove all IP addresses from a whitelist group, click Delete to the right of the target whitelist group.

   You cannot delete system-generated whitelist groups, such as default and hdm_security_ips.

Bulk add ECS IPs via security group

When multiple ECS instances need to access a Tair instance, you can add a Tair to the instance's whitelist. Once added, the security group grants access to the Tair instance for all associated resources within it, including their private and public IPs.

1. Log on to the console and go to the Instances page. In the top navigation bar, select the region in which the instance that you want to manage resides. Then, find the instance and click the instance ID.

2. In the navigation pane on the left, click Whitelist Settings.

3. Click the Security Groups tab.

4. On the Security Groups tab, click Add Security Group.

5. In the dialog box that appears, select the security group that you want to add.

   You can perform a fuzzy search by Security Group Name or Security Group ID.

   Figure 3. Add Security Group

   Note

   You can add up to 10 security groups to each instance.

6. Click OK.

7. Optional: To remove all security groups, click Delete.

Configure a whitelist with the Alibaba Cloud app

1. Download and install the Alibaba Cloud app by using one of the following methods:

   • Go to the Alibaba Cloud app introduction page and scan the QR code in the upper-right corner.

   • Search for Alibaba Cloud in your app store.

2. Log on to the Alibaba Cloud app.

3. Open the Alibaba Cloud app. On the O&M page, in the My Resources section, find Tair (Redis OSS-compatible) and then tap Instance List.

4. Tap the target instance. At the top of the page, tap Account & Whitelist.

5. Perform one of the following operations based on your business needs:

   • To manually modify a whitelist, tap the icon to the right of the target whitelist group, tap Modify, and then enter the IP whitelist.

   • To add a whitelist group, tap Add Whitelist Group at the bottom of the page and enter a group name and an IP whitelist.

   • To delete a whitelist group, tap the icon to the right of the target whitelist group and select Delete.

API reference

FAQ

Escape character is '^]'.
Connection closed by foreign host.