Allowlist

Overview

The Allowlist page holds the trusted IP addresses that DeDDoS must never block automatically. Each time the Action Manager is about to run a blocking action, it checks the attacker’s address against this list. If the address is on the list, the Action Manager skips the action: nothing is blocked and no Blocklist entry is created.

Use this page to:

• Protect critical infrastructure, partner services, and monitoring probes from being blocked by mistake.
• Add trusted addresses before they can trigger an automated response.
• Edit or remove entries that are no longer needed.
• Check whether a specific address is protected.

How to Open This Page

1. Click Administration in the top navigation bar.
2. Click the Allowlist tab (clipboard icon) in the strip of administration sections.

The page address is /administration/allowlist. Older bookmarks that use /administration/whitelist are redirected here automatically.

You need the Modify Settings or the View Settings permission to open this page. With View Settings only, the list is read-only: the Add button and the per-row edit and delete buttons are hidden. If the Allowlist tab is not visible, ask your administrator to add one of these permissions to your group.

Main Areas

The page has a toolbar at the top and the allowlist table below it.

Click to enlarge

• 1 Administration section tabs – switch between administration sections. The active tab (Allowlist) is highlighted.
• 2 Add button – opens the form for a new allowlist entry.
• 3 Total item count – for example, “Total: 3 items”. While a search is active it shows the number of matching entries.
• 4 Search field and search button – filter by name or value.
• 5 Page-size selector – choose 10, 25, 50, or 100 entries per page.
• 6 Allowlist table – Name, Value, and Actions columns. Each name starts with a row help tip (question-mark icon).

Toolbar

• Add – Opens the Add Allowlist entry form. Hidden for read-only users.
• Pagination – Page buttons appear between Add and the counter when the list does not fit on one page. See Pagination.
• Total: N items – The number of entries, or the number of matches while a search is active.
• Search field – Placeholder “Search by name or IP…”. Type a term and press Enter or click the magnifying-glass button. As soon as the field contains text, a clear button (X) appears next to it.
• Page-size selector – 10 (default), 25, 50, or 100 entries per page. Changing it returns you to page 1.

Allowlist Table

The most recently added entries are listed first. While a page is loading, the table is dimmed.

Row Help Tip

Each row starts with a question-mark icon. Hover over it, or move keyboard focus to it, to show a short summary of the row.

Click to enlarge

For example: Allowlist entry “Partner NOC monitoring probe” – traffic from 203.0.113.10 is never blocked automatically. Use the pencil to edit or the trash to remove it.

Protected Entry – “Administrators”

If an entry is named exactly Administrators, its edit and delete buttons are hidden, so it cannot be changed or removed on this page.

Empty States

Click to enlarge

• When the allowlist has no entries, a blue information banner reads No allowlist entries.
• When a search matches nothing, a yellow banner reads No results found for “<your search term>” and the counter shows “Total: 0 items”.

Adding an Entry

1. Click Add in the toolbar. The Add Allowlist entry dialog opens.

   Click to enlarge

2. Fill in the fields:

   Field	Rules
   Name	Required. 4 to 255 characters. A descriptive label, for example “Partner NOC monitoring probe”.
   Value	Required. 4 to 255 characters. Must not already be on the allowlist. The placeholder reads “203.0.113.20 or 203.0.113.0/24”, and the help text reads “Accepts a single IP address or a CIDR range (e.g. 203.0.113.0/24).” IPv4 and IPv6 are both accepted, in any of the formats listed in Accepted Value Formats.

3. Click Save.

   • On success, an “Allowlist entry added” notification appears, the dialog closes, and the table reloads.
   • If the server rejects the value, the dialog stays open and an error appears under the affected field. See Validation Errors.
   • If the entry cannot be saved for a reason that is not tied to a field (for example, a database error), the message appears in a red box at the top of the dialog, above the fields.

Click Close or the X in the top-right corner to cancel without saving.

Accepted Value Formats

The Action Manager honours every format: an attacker address is treated as trusted when it equals a single-address entry or falls inside a CIDR range or IP range on the list. An entry that the Action Manager cannot read is skipped (and logged) without affecting the other entries.

Value Check When You Leave the Field

When you move out of the Value field, the form checks the format right away, before you click Save:

Click to enlarge

If the value is not in one of the accepted formats, the message "<value>" must be an IP address or a CIDR range (e.g. 203.0.113.0/24). appears under the field. The check recognizes IPv4 and IPv6 addresses, CIDR ranges and IP ranges, and it also flags a prefix length that is too long, an IP range whose second address is lower than the first, and an IP range that mixes IPv4 and IPv6. The message is only a hint and does not block saving. When you click Save, the server checks the value again and decides whether it is valid.

Validation Errors

For example, adding 203.0.113.10 a second time shows 203.0.113.10 is already on the allowlist under the Value field, and the dialog stays open:

Click to enlarge

Editing an Entry

1. Click the Edit button (pencil icon) on the entry’s row. The Edit Allowlist entry dialog opens with the current Name and Value filled in.

   Click to enlarge

2. Change the Name, the Value, or both.

3. Click Save. On success, an “Allowlist entry updated” notification appears and the table reloads.

The same rules and checks apply as when adding an entry. A value that matches another allowlist entry is rejected with “<value> is already on the allowlist”.

Deleting an Entry

1. Click the Delete button (trash-can icon) on the entry’s row.

2. A confirmation dialog names the entry and its address, for example Delete allowlist entry “Partner NOC monitoring probe” (203.0.113.10)?, followed by “This action cannot be undone.”

   Click to enlarge

3. Click Yes, continue to delete, or Cancel to keep the entry. Cancel has keyboard focus when the dialog opens.

4. An “Allowlist entry deleted” notification appears and the table reloads. If you deleted the last entry on a page, the previous page is shown.

Warning: After you delete an entry, the Action Manager can block that address in future automated responses.

Searching

1. Type a term into the search field. The search finds partial matches in both the Name and Value columns. For example, 203.0.113 finds 203.0.113.10.
2. Press Enter or click the magnifying-glass button. Typing alone does not filter the list.
3. The table shows the matching entries, the counter shows the number of matches, and the list returns to page 1.

To show the full list again, click the X button next to the search field.

Search is not case-sensitive. Only letters, digits, spaces, dots (.), colons (:), slashes (/), and hyphens (-) are used. Other characters are ignored.

Pagination

• The page-size selector sets 10, 25, 50, or 100 entries per page (default 10).
• When there is more than one page, page buttons appear in the toolbar. The current page is highlighted, and the left and right arrows go to the previous or next page. The left arrow is hidden on the first page, and the right arrow is hidden on the last page.
• Up to five page numbers are shown. When there are more pages, the first and last page are always shown, and an ellipsis (…) marks the skipped pages.
• Pagination controls are hidden when all entries fit on one page.

How Changes Take Effect

• The web platform does not push allowlist changes. The Action Manager downloads the whole allowlist every DEFAULT_THREAD_DELAY seconds (60 by default; see Action Manager), so additions, edits, and deletions take effect within about a minute. No restart is needed.
• Only the Action Manager’s automated blocking uses the allowlist. Adding an address here does not remove it from the Blocklist. If the address is already blocked, delete its blocklist entry yourself.
• The reverse is enforced: while an address is on the allowlist, it cannot be added to the Blocklist manually ("<value> is already on the allowlist"). This check compares the exact value, so an address that is only covered by an allowlist CIDR range or IP range can still be added to the Blocklist by hand.

Notes

• Ranges are honoured. The Action Manager trusts single addresses, CIDR ranges and IP ranges, for both IPv4 and IPv6. See Accepted Value Formats.
• One entry per value. The same value cannot be on the allowlist twice.
• Read-only access. Users with only View Settings can browse and search the list but cannot change it.
• “Administrators” entry. An entry named “Administrators” cannot be edited or deleted on this page.

Related Pages

• Blocklist – Addresses that are currently blocked.
• Internal Networks – The address ranges your organization owns and protects.
• Action Manager – Settings for the automated response system that checks the allowlist, including how often it reloads.