Network

IP allowlisting restricts who can load a status dashboard at the network edge. Use it for internal dashboards that should only be reachable from your office, VPN, or known cloud egress addresses.

Adding IP addresses and CIDR ranges

By default, anyone with the URL can view your status dashboard. The IP allowlist feature lets you restrict access to a defined set of IP addresses or network ranges — useful for internal dashboards that should only be reachable from your office network, VPN, or a specific cloud egress IP.

1. Open the dashboard you want to restrict and go to the Network tab.
2. Click Add entry for each IP address or network range you want to allow.
3. Supported formats:
   • IPv4 address — e.g. 203.0.113.42
   • IPv4 CIDR — e.g. 10.0.0.0/8 (allows the entire 10.x.x.x range)
   • IPv6 address — e.g. 2001:db8::1
4. Click Save Allowlist to store your list.

Limits

Enabling the allowlist

Once your IP list is saved, enable enforcement by toggling IP Allowlist on. The toggle fires immediately — no save required.

From that point, any request to your dashboard from an IP address not in your list will receive a 403 Access restricted page.

Empty list warning

If you enable the allowlist while the entry list is empty, all visitors will be blocked, including yourself. The Network tab displays a warning banner in this case. Add at least one IP address before enabling, or disable the toggle if you need to restore access.

Disabling the allowlist

Toggle IP Allowlist off at any time. Access is restored for all IPs immediately (within the enforcement cache window of up to 60 seconds).

Disabling the toggle does not delete your saved IP list — it remains in place and can be re-enabled at any time.

Troubleshooting

I enabled the allowlist and can no longer access my own dashboard.

Your current IP address is not in the allowlist. To regain access:

1. Open the dashboard's Network tab in Dashboards (admin console access is not affected by the dashboard allowlist).
2. Add your current IP address to the list and save.
3. Or, disable the toggle to restore open access.

A user behind a corporate VPN cannot access the dashboard.

Add the VPN's egress IP address or CIDR range to the allowlist. Your network administrator can provide the correct value.

I added my IP but I'm still blocked.

Enforcement uses a short cache (up to 60 seconds). Wait a moment and try again. If the problem persists, confirm the IP address in the allowlist exactly matches your public IP — use a service such as https://ifconfig.me to check.