Access management in DoubleCloud networks
Access to the resources in all network types is regulated by allowlists. By default, users can connect to resources located in DoubleCloud networks only from IPs specified in the allowlist. Such resources as Visualization have access to the clusters if the allowlists do not block these services.
If you need to connect resources outside DoubleCloud to the resources in external networks, use connections to peer the networks.
Warning
We do not recommend managing access to resources in external networks using these networks' elements such as security groups or ACLs in other provider's networks. We cannot guarantee the security and integrity of your infrastructure in this case.
Use allowlists for ClickHouse®, Apache Kafka®, and Airflow® clusters instead.