Manage the ClickHouse® cluster allowlist

The allowlist allows you to control what IP addresses can connect to the cluster. This article explains how you can add, edit, or delete allowlist entries and control access from other DoubleCloud services.

Add an allowlist entry

1. Go to the Clusters page in the console.

2. Select the cluster where you want to add an entry to the allowlist.

3. Switch to the Allowlist tab.

4. In the Allowlist section, click Edit.

   

5. In the dialog, click + Add item.

   

6. In the new IP address or CIDR field, enter a single IP address or a range in the CIDR format.

   The CIDR range notation has the <ip-address>/<netmask> format. To calculate the netmask value, you can use the CIDR subnet calculator .

   How to open the cluster for all connections

   If you want to remove access restrictions, add 0.0.0.0/0 to the list to allow IPv4 connections and ::/0 to allow connections via IPv6.

   Warning

   This opens your cluster to any and all outside connections. It may likely cause security issues.

7. Click Save.

   Updating the cluster allowlist settings usually takes around five minutes.

Edit an allowlist entry

1. Go to the Clusters page in the console.

2. Select the cluster where you want to edit an allowlist entry.

3. Switch to the Allowlist tab.

4. In the Allowlist section, click Edit.

   

5. In the dialog, edit the IP addresses, CIDRs, and descriptions.

   The CIDR range notation has the <ip-address>/<netmask> format. To calculate the netmask value, you can use the CIDR subnet calculator .

   How to open the cluster for all connections

   If you want to remove access restrictions, add 0.0.0.0/0 to the list to allow IPv4 connections and ::/0 to allow connections via IPv6.

   Warning

   This opens your cluster to any and all outside connections. It may likely cause security issues.

6. Click Save.

   Updating the cluster allowlist settings usually takes around five minutes.

Delete an allowlist entry

1. Go to the Clusters page in the console.

2. Select the cluster where you want to delete an allowlist entry.

3. Switch to the Allowlist tab.

4. In the Allowlist section, click Edit.

   

5. In the dialog, click next to the allowlist entries you want to delete.

6. Click Save.

   Updating the cluster allowlist settings usually takes around five minutes.

Control access from DoubleCloud services

1. Go to the Clusters page in the console.

2. Select the cluster where you want to edit access from DoubleCloud services.

3. In the Access from DoubleCloud services section, allow or block access for Visualization and WebSQL.

   

See also

• Allowlists in Managed Service for ClickHouse®