IP Firewall

NOTE

You need to have and activate the security_admin role to use this feature. The active features list is in the top right corner of the console.

By default, the query endpoint of the CelerData cloud account is accessible to all IP addresses on the public network. This means that by default the account is protected by your password, so make sure that you use good passwords.

We recommend that you enable the IP Firewall feature and restrict access to known address ranges. You can find the IP Firewall settings in Security Settings → IP Firewall

TIP

Check your public IP address before you start creating rules. You can check with your IT department or use a tool like What Is My IP Address. Take into consideration where all of your colleagues work from, and where people who are on-call work from if they are not in an office.

The first rule that you enable must include the IP Address range of your current workstation. After you add that rule you can add any other ranges for other work locations.

If you have created at least one rule and set it to active state, only the IPs in the allowlist of the current rule can access it, and the other IPs are blocked.

If you create multiple rules, the union of the IP allowlists of the multiple rules is the collection of all IPs that can access the query endpoint of your current account.

NOTE

Please note that the firewall rules you create will block both Client JDBC requests and GUI Console login requests from the browser. This means that when creating firewall rules, you need to be careful not to block your current work computer IP.

If you lose Console access, please use the email address you registered with CelerData Cloud Serverless to contact technical support to remove the IP restriction.