API Policies

Back Next

IP filtering policies

IP filtering policies control access to managed APIs, managed API groups, and custom APIs within your organization. An IP filtering policy defines a set of access rules that determine the IP addresses that are allowed to access an API and the IP addresses that are blocked from accessing an API. You must be assigned the Deployer role to assign IP filtering policies to managed APIs.

When API Center receives a request to access a managed API, it checks the request IP address against the rules in the policy, in the order that the rules are listed in. API Center applies the first rule that matches the request IP address to the request.

You can't use a combination of allow and deny IP filtering rules for the same API.

You can define IP filtering policies at both the domain level, managed API, and managed API group level. The Domain IP Filtering
policy applies globally to every API in the organization by default. If you configure both managed API or managed API group and domain IP filtering policies, the managed API or managed API group policies take precedence over domain IP filtering policies.

IP filtering policy example

The following table lists rules that allow access to specific IP address ranges:

Access Type	From IP address	To IP address
Allow	9.10.11.12	9.10.25.27
Allow	5.6.7.8	5.6.15.17
Allow	1.2.3.4	1.2.12.14

The following table lists rules that deny access to all IP addresses:

Access Type	From IP address	To IP address
Deny	0.0.0.0	255.255.255.255

Rename Saved Search

Table of Contents

API Policies

API Policies

IP filtering policies

IP filtering policies

IP filtering policy example