Feature Overview

A client IP address is the IP address used to establish a connection from a client to a CDN point of presence (POP). CDN can use this feature to identify client IP addresses for filtering user requests and deny or allow access from specific IP addresses. This feature can be used to solve various issues, such as malicious access and attacks from specific IP addresses.

• IP address trustlist: a list of client IP addresses or CIDR blocks from which you want to allow access. A CDN point of presence (POP) denies access from IP addresses that are not included in the IP address trustlist and returns the 403 status code.

• IP address blocklist: a list of client IP addresses or CIDR blocks from which you want to deny access. A CDN POP allows access from IP addresses that are not included in the IP address blocklist. A CDN POP denies access from IP addresses included in the IP address blocklist and returns the 403 status code.

Procedure

Log in to the CDN console.
Go to Domain Management -> Domain List page.
On the Domain List page, find the target domain name, and click Edit in the Actions column.
Click Access Control .
Click the IP Trustlist/Blocklist tab.
Turn on the IP Trustlist/Blocklist switch to enable the feature. By default, the feature is disabled.
Select Trustlist or Blocklist as the type. Separate multiple entries with line breaks. Each entry must be unique. CIDR blocks are supported. Example: 127.0.0.1/24.
After the configuration is complete, submit and save the information.

Notes: you can choose either Trustlist or Blocklist.

Examples

Case 1: Blacklist

Parameter	Example
IP Trustlist/Blocklist switch	ON
Type	Blocklist: 101.1.1.1

Descriptions: Client IP address 101.1.1.1 will be blocked and get 403 response.

Case 2：Whitelist

Parameter	Example
IP Trustlist/Blocklist switch	ON
Type	Trustlist: 101.1.1.2

Descriptions: Only client IP address 101.1.1.2 is allowed for request contents under the domain.

Content Delivery Network

IP backlist/whitelist