How to whitelist an IP address
Add an IP address to the allow-list to trust it permanently. Trusted clients bypass rate-limiting and blocking, and are never caught by the automatic protection that blocks repeated failed logins. Use it for addresses you control - your office, a monitoring service, or a partner integration.
Warning
An allow-listed client skips the firewall's protections. Only add addresses you genuinely trust, and keep the list as narrow as possible.
Add a trusted IP on the Security tab (recommended)
For lasting trust, add the address to the host configuration so it stays across deployments:
- Open the host and go to the Security tab.
- Under Whitelist IP Addresses, add the IP address, or the tightest range that covers it.
- Save and publish.
This writes the firewall_whitelist key for you - see Configure the firewall.
Whitelist immediately with the CLI
To trust an address right away - for example to restore access for someone who is locked out - connect over SSH:
tscli firewall whitelist 198.51.100.7For a change that must last, also add it on the Security tab as above.
Remove from the allow-list
tscli firewall unlist 198.51.100.7If you added the address on the Security tab, remove it there and publish.