IP Allowlist for Monitoring

Overview

Access to MariaDB SkySQL Monitoring is restricted:

  • SkySQL Monitoring is firewall-protected

  • By default, a monitoring IP allowlist entry is included to enable access from all IP addresses

  • If the default entry is removed:

    • IPv4 addresses and IPv4 netblocks can be added to the monitoring IP allowlist to enable access

    • Access from other addresses will be blocked

A separate service IP allowlist controls access to SkySQL services.

Default

By default, the IP allowlist for monitoring contains a 0.0.0.0/0 entry (all IP addresses permitted).

  • This entry can be removed if unneeded.

  • If left intact, you do not need to allowlist specific IP addresses.

Allowlist Maintenance

It is best practice to periodically review the allowlist, and to remove any addresses or netblocks that are confirmed as not in use and no longer valid.

Supported Addresses

  • Addresses must be valid IPv4 addresses.

  • When adding an IPv4 CIDR block, the start IP address of the CIDR block must be specified.

Adding an IP Address

The monitoring allowlist can be updated any time after a service has been launched.

Individual IPv4 addresses and IPv4 netblocks do not need to be added if the default entry is left intact.

To add to the monitoring allowlist:

  1. Log in to MariaDB SkySQL.

  2. Click on the "Allowlist for Monitoring" in left navigation.

  3. Add the desired IPv4 address or IPv4 netblock:

    • Enter the IPv4 address or netblock. For example, 192.0.2.1/32 or 198.51.100.0/24

    • Click on the "Add" button.

    • Repeat as needed.

  4. Alternatively, you can add your own IP address using the "Add my current ip address" link.

  5. Click on the "Done" button.

The interface will reflect the new allowlist settings immediately, but changes may take a few minutes to propagate to your server.

Deleting an IP Address

The monitoring allowlist can be updated any time after a service has been launched.

To delete an address from the monitoring allowlist:

  1. Log in to MariaDB SkySQL.

  2. Click on the "Allowlist for Monitoring" in left navigation.

  3. Click on the "X" icon ("Remove Row") next to the entry to remove.

    • Repeat as needed.

  4. Click on the "Done" button.

The interface will reflect the new allowlist settings immediately, but changes may take a few minutes to propagate to your server.

Modify an IP Address

The monitoring allowlist can be updated any time after a service has been launched.

To modify an address on the monitoring allowlist:

  1. Log in to MariaDB SkySQL.

  2. Click on the "Allowlist for Monitoring" in left navigation.

  3. Click on the pencil icon ("Edit Row") next to the entry to modify.

    • Edit the entry as needed.

    • Click on the check mark icon ("Update Row").

    • Repeat as needed.

  4. Click on the "Done" button.

The interface will reflect the new allowlist settings immediately, but changes may take a few minutes to propagate to your server.