Configure allow IP/CIDR
Configure allow IP/CIDR
Updated on 05 Aug 2025

How it Works

  • When a request is made to the Load Balancer, the system will check the source IP address of the request.
  • If the source IP address is within the allowed CIDR ranges, the request will be accepted and forwarded to the backend server.
  • If the source IP address is not within the allowed CIDR ranges, the request will be rejected and not forwarded.

When to Configure Allowed CIDRs to the Load Balancer

  • Enhance Security: Prevent unwanted connections and reduce the risk of external attacks.
  • Access Control: Manage access to the Load Balancer by declaring a list of allowed CIDRs.
  • Performance Optimization: Reduce Load Balancer overhead by blocking unwanted traffic.

Configuration Guide

Step 1: Log in to the Load Balancer homepage on the FPT Cloud Portal.

Step 2: On the Load Balancer homepage, click on the Load Balancer you want to configure.

Step 3: In the Load Balancer detail section, select the Listener tab.

Step 4: Click on the name of the Listener you want to configure to open the Update screen.

Step 5: In the Listener update screen, scroll down to the Allow CIDRs Configuration section.

  • Here, you can configure one or more IP ranges allowed to access.
  • If multiple ranges are needed, enter one CIDR block per line.
  • For example:
192.168.0.0/24  
172.16.0.0/24

This means only IP addresses within these two ranges are allowed to access the service.

Step 6: Click Update Listener at the bottom-right of the screen to apply the configuration.

Notes

  • Only declare trusted CIDRs to avoid potential abuse.
  • After making changes, test access again to ensure the service works normally.
  • If you're using another firewall in front of the Load Balancer, such as FPT Cloud NGFW, make sure to configure the same CIDRs on that firewall.