Skip to main content

Configuring Access to Lifecycle Cloud

Configuring Inbound Traffic Allowlist

The Allowlist can be configured to filter inbound traffic to the IQ Server by IP address. Once the Allowlist has been set it will block all inbound traffic unless the IP address is found in the Configuration REST API access Allowlist or the config.yml system Allowlist.

Single IP addresses, and also IP address ranges using CIDR notation can be added to the Allowlist. The Allowlist supports both IPv4 and IPv6 IP addresses. A description field is also supported to help keep track of IP addresses.

Note

Any CIDR IP address must be a valid CIDR notation. If the CIDR address is invalid it will be interpreted as a single IP address, not an IP address range.

REST API Allowlist

The configuration REST API allows users with the System Administrator role or the Edit System Configuration and Users permission to self-service the access Allowlist.

The IQ Server Allowlist can be configured using the Configuration REST API - v2, the accessAllowlist feature is only available to Lifecycle Cloud customers.

Property

Default Value

Description

accessAllowlist

null

JSON list of allowed inbound IP or CIDR addresses, with descriptions

Example REST API Allowlist request body.

{
  "accessAllowlist": [
    {
      "ipAddress": "192.168.33.67",
      "description": "User IP address"
    },
    {
      "ipAddress": "223.225.0.0/18",
      "description": "IP address range CIDR notation"
    }
  ]
}

System Allowlist

The system Allowlist is part of config.yml and is used to store user admin and infrastructure IP addresses. The system Allowlist can be modified with the creation of a support ticket.

Example config.yml system Allowlist configuration.

# System IP Address Filter Allowlist
# Supports single IP address and IP address range in CIDR notation
systemAllowlist:   
  - ipAddress: 223.223.0.0/18
    description: Customer Monitor IP range CIDR Notation
  - ipAddress: 223.223.33.66
    description: Customer Admin IP for REST API Access