IP allowlist

Overview

This topic explains how to create and maintain an IP address allowlist to help manage access to the LaunchDarkly app and the REST API.

Maintaining an IP allowlist lets you configure specific IP addresses that can access your LaunchDarkly app using a browser, the LaunchDarkly REST API, or both. This gives you control over the locations from which your members can access their LaunchDarkly account.

The IP allowlist supports both individual IP addresses and classless inter-domain routing (CIDR) ranges. The allowlist supports IPv4 values. LaunchDarkly does not support connections over IPv6.

If you’re looking for the list of LaunchDarkly public IP addresses, read Public IP list.

View the IP address allowlist

To view your IP address allowlist, click the gear icon in the left navigation to view organization settings. Then, click Security and scroll to the “IP allowlist” section:

Add an address or range to the IP allowlist

You can add a single IP address or a CIDR range to the allowlist. Here are examples of how to format them:

• single IP address: 198.51.100.0
• CIDR range: 198.51.100.0/24

To add a new IP address or CIDR range:

1. Click the gear icon in the left sidenav to view Organization settings.
2. Click Security.
3. Scroll to the “IP allowlist” section.
4. Click Add IP address. An “Add IP address” dialog appears.
5. Enter an IP address or range.
6. (Optional) Enter a Description.
7. Click Add to allowlist.

The IP address or range appears in the list.

Restricting or allowing access

For the IP addresses and CIDR ranges in the allowlist, you can allow or restrict access to the LaunchDarkly app in a browser, the REST API, or both.

Manage access to the app in a browser

To restrict access to the app in a browser, toggle the “Browser allowlist” toggle On. When toggled on, your members can only interact with the app in a browser from the IP addresses and ranges in the allowlist.

To allow your members to interact with the app in a browser from any IP address or range, toggle the “Browser allowlist” Off.

The default setting for both toggles is Off.

Manage access to the REST API

To restrict access to the REST API, toggle the “API token allowlist” toggle On. When toggled on, your members can only interact with the REST API from the IP addresses and ranges in the allowlist.

To allow your members to interact with the REST API from any IP address or range, toggle the “API token allowlist” Off.

Manage access to both the REST API and the app in a browser

To restrict access to both the app in a browser and the REST API, toggle both the “API token allowlist” and the “Browser allowlist” toggles On.

Delete an address or range from the IP allowlist

To delete an IP address or CIDR range:

1. Click the gear icon in the left sidenav to view Organization settings.
2. Click Security.
3. Scroll to the “IP allowlist” section.
4. Click the three-dot overflow menu next to the IP address you want to delete.
5. Select Remove from allowlist. A “Remove from allowlist” dialog appears.
6. Enter the IP address or range to Confirm.
7. Click Remove from allowlist.

The IP address or range is removed from the list.