IP Filtering

2 min read Updated 2 weeks ago

IP Filtering

IP filtering lets you control which IP addresses can connect to your managed database. By default, managed databases are not reachable from the public internet. Public access is turned off and no IP addresses are allowed. To connect from outside, enable Public access on the Connection tab and add the IPs or ranges that may connect.

Configuring IP Filters

  1. Navigate to your database
  2. Go to the Access control tab
  3. Enter an IP address or CIDR range, optionally with a note, and click Add

Changes are saved right away. A note on an existing entry is saved when you leave the field or press Enter. To allow every address instead, turn on Allow access from all IPs.

IP Format

You can specify individual IP addresses or CIDR ranges:

  • Single IP: 203.0.113.50
  • CIDR range: 203.0.113.0/24 (allows 203.0.113.0 through 203.0.113.255)
  • Allow all: 0.0.0.0/0 (allows connections from any IP)

Common Configurations

Allow only your Ploi Cloud applications:

Add the Ploi Cloud cluster IP ranges. You can find these in your application's network settings or via the API.

Allow your office network:

Add your office's public IP address or range to restrict access to your team.

Allow a specific server:

Add the IP of a single server that needs database access.

Best Practices

  • Restrict to known IPs - Avoid allowing all IPs (0.0.0.0/0) in production
  • Use CIDR ranges for dynamic IPs - If your application's IPs may change, use a broader range
  • Keep the list updated - Remove old IPs when they're no longer needed
  • Test after changes - Verify your application can still connect after updating filters

Troubleshooting

"Connection refused" after adding IP filters:

  • Make sure you've included the IP address of the machine or application trying to connect
  • Remember that your local IP may differ from what you expect — check your public IP
  • CIDR notation mistakes (e.g., using /32 instead of /24) can be too restrictive

Next Steps