Skip to main content

Restrict access to the information base from the Internet

Last update:
carefully

Access restriction applies only to HTTP/HTTPS connections via a thin client or web client. Connecting via a thick client or via TCP/IP using a thin client will remain possible from any IP address.

By default, access to information bases via the Internet is allowed from all IP addresses. You can restrict access — users will only be able to connect to information bases from IP addresses that you have added to the allowlist.

The allowlist of IP addresses is configured for the 1C server cluster and applies to all information bases in the cluster.

Add an address to the allowlist

  1. Ensure that the IP address is static. You can check the address type with your provider.

  2. In the Control panel, on the top menu, click Products and select Ready-to-use 1C Cloud.

  3. Go to the 1C Server Clusters section.

  4. Open the cluster page → Administration tab.

  5. In the IP Allowlist for Web Publications row, click Edit.

  6. Click Add IP.

  7. Enter the address. You can add:

    • IPv4 address;
    • subnet in the format 198.51.100.0/29.

  8. Optional: to add another address, click Add IP and return to step 6.

  9. Click Edit.

  10. Click Save. The settings will be applied when the cluster status changes to ACTIVE:

  • if the list was empty before configuration and you added IP addresses to it, all current connections will continue to work until they are terminated by the user or the infobase administrator. After that, connecting from an IP address not in the list will not be possible;
  • if there were already IP addresses in the list and you added an additional one, you will be able to connect from it immediately.

Remove an address from the allowlist

If you remove all addresses from the list, the access restriction will be completely removed — you will be able to connect to the cluster infobases from any IP address.

  1. In the control panel, from the top menu, click Products and select 1C Managed Cloud.

  2. Go to the 1C Server Clusters section.

  3. Open the cluster page → Administration tab.

  4. In the IP Allowlist for Web Publications row, click Edit.

  5. To the right of the required address, click .

  6. Click Edit.

  7. Click Save. The current connection from the removed address will continue to work until it is terminated by the user or the infobase administrator. After that, connecting from the removed address will not be possible.