Skip to main content

IP Allowlisting

FastGateway supports IP-based access control in two modes: General and Client.

General Mode​

In general mode, IP rules are defined directly on the route and apply to all traffic.

authorization:
  clientCIDRs:
    - "10.0.0.0/8"
    - "192.168.1.0/24"
    - "203.0.113.50/32"

Client Mode​

In client mode, each client has its own IP allowlist. Clients are attached to routes and traffic is validated against their specific IP addresses.

# Client definition
client:
  name: "partner-api"
  ipAddresses:
    - "203.0.113.0/24"
    - "198.51.100.10/32"

CIDR Notation​

FormatDescription
10.0.0.1/32Single IP address
10.0.0.0/24256 addresses (10.0.0.0 - 10.0.0.255)
10.0.0.0/1665,536 addresses
10.0.0.0/816 million addresses

Mode Selection​

  • Use General mode for simple, route-wide IP restrictions
  • Use Client mode when different clients need different IP allowlists
  • General and Client modes are mutually exclusive on a route