Restrict access to the information base from the Internet
Access restriction applies only to HTTP/HTTPS connections via thin client or web client. You can connect via thick client or TCP/IP via thin client from any IP address.
By default, access to information databases via the Internet is allowed from all IP addresses. You can restrict access — users will be able to connect to the information databases only from IP addresses that you added on the authorized list.
The list of allowed IP addresses is configured for a cluster of 1C servers and applies to all information bases in the cluster.
Add the address to the list of allowed addresses
-
Make sure the IP address is static. Check the type of address with your ISP.
-
In control panels go to Ready cloud 1C → 1C server clusters.
-
Open the cluster page → tab Administration.
-
On the line IP whitelist for accessing web publications click Modify.
-
Click Add IP.
-
Enter an address. You can add:
- IPv4 address;
- subnet in the format
198.51.100.0/29
.
-
Optional: to add another address, press Add IP and go back to step 6.
-
Click Modify.
-
Click Save. The settings will be applied when the cluster goes into status
ACTIVE
:- if the list was empty before the configuration and you added IP addresses to it — all current connections will continue to work until they are terminated by users or the administrator of the information base. After that, you cannot connect from an IP address that is not in the list;
- If there were already IP addresses in the list and you add an additional one, you will be able to connect from it immediately.
Remove an address from the list of allowed addresses
If you remove all addresses from the list, the access restriction will be completely removed — you can connect to the cluster information databases from any IP address.
-
In control panels go to Ready cloud 1C → 1C server clusters.
-
Open the cluster page → tab Administration.
-
On the line IP whitelist for accessing web publications click Modify.
-
To the right of the desired address, click .
-
Click Modify.
-
Click Save. The current connection from the remote address will continue to work until it is terminated by the user or the administrator of the information base. After that, it will not be possible to connect from the remote address.