Whitelist
Overview
The IP Whitelist feature on VKS's Private Node Group mode allows you to only allow specific IP addresses to connect to your Cluster. This helps increase security for applications and sensitive data by restricting access from unknown sources.
Benefit
Enhanced security: IP Whitelist helps protect your data and applications from potential threats on public networks, such as cyberattacks and data breaches.
Minimize risk: By restricting access to sensitive nodes, Whitelist IP helps minimize the risk of spreading a data breach to other parts of your network.
Greater control: Whitelist IP allows you to tightly control access to your nodes, ensuring only authorized users and applications can access.
Recommendations for Using Whitelists in Different Cluster Models
1. Public Cluster Containing Only Public Node Groups
Recommendation: Whitelisting is not recommended.
For users in the HCM Region, if you need to enable IP Whitelisting for security reasons, please allow the following vServer public IP ranges:
49.213.64.0/23
49.213.71.0/24
49.213.86.0/23
61.28.224.0/20
61.28.250.0/24
103.245.248.0/22
58.84.0.0/22
116.118.88.0/21
180.93.180.0/22
120.138.75.0/24
120.138.79.0/24
122.201.13.0/24
122.201.15.0/24
103.196.238.0/23
103.245.254.0/23
210.245.38.93/32For users in the HAN Region, if you need to enable IP Whitelisting for security reasons, please allow the following vServer public IP ranges:
157.20.201.0/24
157.20.200.96/27
157.20.200.128/252. Public Cluster with Private Node Group Using a NAT Gateway (e.g., pfSense, Palo Alto)
Recommendation: Whitelisting can be used. Make sure to whitelist the IP address of the NAT Gateway.
3. Private Cluster with Public or Private Node Group
Recommendation: Whitelisting can be used.
Edit Whitelist
To use the IP Whitelist feature on Private Node Group mode, you need to perform the following steps:
Step 1: Visit https://vks.console.vngcloud.vn/overview
Step 2: At the Overview screen , select the Kubernetes Cluster menu.
Step 3: Select the icon 
and select Edit Whitelist or select the Edit icon when viewing details of a Cluster to add a Whitelist to your Cluster.
Step 4: Now, the Edit Whitelist screen displays, you can enter the IP address you want to allow access to the Cluster then select Add .
Step 5: Repeat step 4 if you want to add more Whitelist IPs to your Cluster. You can also select Delete to delete the Whitelist IP you added previously.
Step 6: Select Save to save the information or Cancel to cancel saving these parameters.
Last updated