Cluster Operation Page Access Control
By default, CelerData allows users to connect to the cluster operation (Open Cluster) page from any IP address. You can set IP Access List for a CelerData cluster to allow or deny access to the page based on its origin.
NOTE
Only members with the Edit Cluster role have the privilege to perform the following operations.
Add an IP access rule
Follow these steps to add an IP access rule for a cluster:
- Sign in to the CelerData Cloud BYOC console.
- On the Clusters page, click the cluster that you want to add an IP access rule to.
- On the cluster details page, click the Security tab. Then, click Add Rule in the IP Access List section.
- Set the rule in the Add Rule dialog box:
- Choose whether you want to allow or block a set of IP addresses.
- Specify a name for the rule in the Label section.
- Specify the IP addresses (optionally in the CIDR format) you want to allow or block in the IP Addresses section. Multiple IP addresses can be separated by a comma (
,
). - Turn on or off the switch next to Enabled to enable or disable the rule after creation.
- Click Apply to add the rule.
NOTE
- You can set multiple IP Access List for each CelerData cluster.
- IP Access Lists across different CelerData clusters are independent.
- Currently, only IPv4 is supported.
- CelerData only allows access from IP addresses in all
allowed
-type rules.- If no
allowed
-type rule is set, CelerData will allow all access from any IP addresses except those in theblocked
-type rules.blocked
-type rules take effect on IP addresses that are listed both inallowed
-type andblocked
-type rules.
Edit an IP access rule
You can edit, enable, or disable an IP access rule.
Follow these steps to edit an IP access rule for a cluster:
- Sign in to the CelerData Cloud BYOC console.
- On the Clusters page, click the cluster that you want to edit the IP access rule for.
- On the cluster details page, click the Security tab.
- Click the More (...) icon in the Action field of the IP access rule you want to edit. Then, click Edit.
- Set the rule in the Add Rule dialog box, or enable or disable the rule by turning on or off the switch next to Enabled.
- Click Apply to apply the rule.
Delete an IP access rule
You can delete an IP access rule.
Follow these steps to delete an IP access rule for a cluster:
- Sign in to the CelerData Cloud BYOC console.
- On the Clusters page, click the cluster that you want to delete the IP access rule from.
- On the cluster details page, click the Security tab.
- Click the More (...) icon in the Action field of the IP access rule you want to delete. Then, click Delete.
- In the message that appears, click Confirm.