---
title: "Restrict access to the information base from the Internet"
sidebar_label: "Restrict access from the Internet"
description: "How to restrict access to an information base when connecting via the Internet"
sidebar_position: 5
---

import Formbricks from '@theme/MDXComponents/Formbricks'
import TrashIcon from 'docs-kit/icons/trash'

# Restrict access to the information base from the Internet

:::danger

Access restriction applies only to HTTP/HTTPS connections via a thin client or web client. Connecting via a thick client or via TCP/IP using a thin client will remain possible from any IP address.

:::

By default, access to information bases via the Internet is allowed from all IP addresses. You can restrict access — users will only be able to connect to information bases from IP addresses that you [have added](#add-address) to the allowlist.

The allowlist of IP addresses is configured for the 1C server cluster and applies to all information bases in the cluster.

## Add an address to the allowlist \{#add-address}

1. Ensure that the IP address is static. You can check the address type with your provider.

2. In the [Control panel](https://my.selectel.ru/ones/server), on the top menu, click **Products** and select **Ready-to-use 1C Cloud**.

3. Go to the **1C Server Clusters** section.

4. Open the cluster page → **Administration** tab.

5. In the **IP Allowlist for Web Publications** row, click **Edit**.

6. Click **Add IP**.

7. Enter the address. You can add:

   * IPv4 address;
   * subnet in the format `198.51.100.0/29`.

8. Optional: to add another address, click **Add IP** and return to step 6.

9. Click **Edit**.

10. Click **Save**. The settings will be applied when the cluster status changes to `ACTIVE`:

* if the list was empty before configuration and you added IP addresses to it, all current connections will continue to work until they are terminated by the user or the infobase administrator. After that, connecting from an IP address not in the list will not be possible;
* if there were already IP addresses in the list and you added an additional one, you will be able to connect from it immediately.

## Remove an address from the allowlist \{#delete-address}

If you remove all addresses from the list, the access restriction will be completely removed — you will be able to connect to the cluster infobases from any IP address.

1. In the [control panel](https://my.selectel.ru/ones/server), from the top menu, click **Products** and select **1C Managed Cloud**.

2. Go to the **1C Server Clusters** section.

3. Open the cluster page → **Administration** tab.

4. In the **IP Allowlist for Web Publications** row, click **Edit**.

5. To the right of the required address, click <TrashIcon />.

6. Click **Edit**.

7. Click **Save**. The current connection from the removed address will continue to work until it is terminated by the user or the infobase administrator. After that, connecting from the removed address will not be possible.

<Formbricks />
