Configure IP Restriction

Learn how to enable and configure IP Restriction in the Medianova Control Panel to allow or block access from specific IP addresses.

IP Restriction enables you to define which IP addresses can access your CDN Resources by using either whitelist or blacklist rules. When configured, access control is enforced at the CDN edge, ensuring that unauthorized requests are blocked before they reach your origin server.

You can enable IP Restriction for each CDN Resource in the Medianova Control Panel.

1

Access the IP Restriction

1. Log in to the Medianova Control Panel.

2. Go to CDN → CDN Resources.

3. Select the resource where you want to apply IP restrictions.

4. Click the Security tab.

5. Open the IP Restriction (ACL) section.

IP Restriction is available only for active CDN Resources.

2

Choose Restriction Mode

Select one of the following modes based on your access policy:

Mode	Description
Whitelist	Only the IP addresses you add will be allowed. All others will be blocked.
Blacklist	The IP addresses you add will be blocked. All others will be allowed.

Whitelist and Blacklist modes are mutually exclusive — only one can be active at a time.

3

Add IP Addresses or Ranges

1. Click Add IP.

2. Enter an IP address or subnet range in CIDR format (e.g., 192.168.0.0/24).

3. Press Enter or click the + icon to add it to the list.

4. Repeat for additional IPs or ranges.

5. Click Save to apply changes.

Use CIDR notation to efficiently manage large network ranges.

4

Edit or Remove Existing Entries

• Edit: Click the Edit icon to update an IP or range.

• Delete: Click the Delete icon to remove it.

• Save Changes: Click Save after every modification to ensure updates are applied at the edge.

Removing an entry from a Whitelist immediately blocks that IP from accessing your resource.

5

Verify Configuration

Once saved, you can verify your configuration:

• Attempt access from an allowed IP → content should load successfully.

• Attempt access from a restricted IP → access should be denied or redirected.

• Review logs or analytics to confirm correct enforcement.

Test from different networks (VPN, mobile, or office IPs) to ensure your list is accurate.