It is time to say goodbye: This version of Elastic Cloud Enterprise has reached end-of-life (EOL) and is no longer supported.

The documentation for this version is no longer being maintained. If you are running this version, we strongly advise you to upgrade. For the latest information, see the current release documentation.

« Traffic Filtering Manage your Kibana instance »
Elastic Docs ›Elastic Cloud Enterprise Reference [2.11] ›Administering deployments ›Traffic Filtering

IP traffic filters

edit

IP traffic filters

edit

Traffic filtering, by IP address or CIDR block, is one of the security layers available in Elastic Cloud Enterprise. It allows you to limit how your deployments can be accessed.

Read more about Traffic Filtering for the general concepts behind traffic filtering in Elastic Cloud Enterprise.

Create an IP filter rule set

edit

You can combine any rules into a set, so we recommend that you group rules according to what they allow, and make sure to label them accordingly. Since multiple sets can be applied to a deployment, you can be as granular in your sets as you feel is necessary.

To create a rule set:

  1. Log into the Cloud UI.
  2. From the Platform menu, select Security.
  3. Click Create filter.
  4. Select IP filtering rule set.
  5. Create your rule set, providing a meaningful name and description.

  6. Select if this rule set should be automatically attached to new deployments.

    Each rule set is bound to a particular region and can be only assigned to deployments in the same region.

  7. Add one or more rules using IPv4, or a range of addresses with CIDR.

    DNS names are not supported in rules.

The next step is to associate one or more rule-sets with your deployments.

Edit an IP filter rule set

edit

You can edit a rule set name or change the allowed traffic sources using IPv4, or a range of addresses with CIDR.

  1. Log into the Cloud UI.
  2. From the Platform menu, select Security.
  3. Find the rule set you want to edit.
  4. Click the Edit icon.

Delete an IP filter rule set

edit

If you need to remove a rule set, you must first remove any associations with deployments.

To delete a rule set with all its rules:

  1. Remove any deployment associations.
  2. From the Platform menu, select Security.
  3. Find the rule set you want to edit.
  4. Click the Delete icon. The icon is inactive if there are deployments assigned to the rule set.

Associate an IP filter rule set with your deployment

edit

After you’ve created the rule set, you’ll need to associate IP filter rules with your deployment:

  1. Go to the deployment.
  2. On the Security page, under Traffic filters click Apply filter.
  3. Select the filter you want to apply and click Apply filter.

Remove an IP filter rule set association from your deployment

edit

If you want to remove any traffic restrictions from a deployment or delete a rule set, you’ll need to remove any rule set associations first. To remove an association through the UI:

  1. Go to the deployment.
  2. On the Security page, under Traffic filters click Remove.
« Traffic Filtering Manage your Kibana instance »