Manage the ClickHouse® allowlist

In this article, you can learn how to add, edit, delete allowlist entries and control system services access to the data on your cluster.

Add an allowlist entry

  1. Go to the Clusters page in the console.

  2. Select the cluster whose allowlist you want to configure.

  3. Click the Allowlist tab.

  4. Enter a single IP address or a CIDR in the IP address or CIDR textbox:

    • CIDR range notation looks like this: <IP address>/<Netmask>.

      Check the Netmask value with an external subnet calculator. For example, CIDR Subnet calculator .

    • Single IP address: enter the IP Address you want to add to the list.

    Note

    If you are going to give open access to your cluster, add 0.0.0.0/0 to your allowlist - this will open the cluster to connections via IPv4. To allow IPv6 access, add ::/0.

  5. Type a description of the CIDR or the IP address you want to add to your allowlist.

  6. Click Add.

Edit an allowlist entry

  1. Go to the Clusters page in the console.

  2. Select the cluster whose allowlist you want to configure.

  3. Click the Allowlist tab.

  4. Select the entry you want to edit, click Edit.

  5. In the Edit Allowlist Entry dialog:

    1. Edit an IP address or a CIDR in the IP address or CIDR textbox:

      If needed, check the Netmask value with an external subnet calculator. For example, CIDR Subnet calculator .

    2. Edit the Description field.

    3. Click Save.

Delete an allowlist entry

  1. Go to the Clusters page in the console.

  2. Select the cluster the allowlist of which you want to delete an entry from.

  3. Click the Allowlist tab.

  4. Select the entry you want to remove and click Delete.

Control system services access to your cluster

  1. Go to the Clusters page in the console.

  2. Select the cluster the allowlist of which you want to edit.

  3. Click the Allowlist tab.

  4. Under SYSTEM SERVICES ACCESS, Allow or Block access of a system service to the data on your cluster.

See also