To ensure connection security, ByteHouse supports binding VPC/EIP to establish tenant-level private and public domain name access, and allows configuration of IP allowlists to manage access permissions. This article describes how to configure public networks, private networks, and IP allowlists.

Only users with the AccountAdmin role can configure private network domain names, public network domain names, and set IP allowlists. Other users can only view private and public network information and use the configured IP allowlist.

Bind private network #

1. Log in to the ByteHouse Console, go to the Tenant Management -> Basic Information page, and in the Network Information module, click the Bind button next to the private network domain name.
   
2. On the bind private network page, select the created private network, subnet, and security group, then click Submit.
   

   warning

   If the IPv4 CIDR conflicts with the IP address of the private network environment, the subnet will not be displayed. The private network CIDR range and IP address vary by environment. Please use the IP address displayed in the interface as the reference.

   If there are no available options in your list or you need to create new options, click the corresponding Create button to complete the creation, then return to this page to configure the binding information. For details on related operations and billing information, refer to the following documents:
   • Create private network
   • Create subnet
   • Create security group
   • Private network product billing
3. (Optional) After binding is complete, you can click the Details button next to the private network domain name to view detailed information about the currently bound private network, subnet, security group, and private network IP address.
   

Rebind private network domain name #

Prerequisites #

If you have already bound a public network domain name, please Unbind the public Domain Nameunbind the public network domain name first, then perform the rebind private network domain name operation.

Procedure #

1. Click the Rebind button next to the private network domain name.
   
2. On the rebind private network page, select the private network, subnet, and security group, then click Confirm.
   

Enable/disable public network resolution #

The public network resolution feature supports resolving the current private network domain name in a public network environment, suitable for scenarios such as dedicated lines and similar situations.
Click the Public Network Resolution Enable button, then click Confirm.

After enabling, to disable public network resolution, click the Public Network Resolution Close button, then click Confirm.

Bind public domain name #

1. Click the Bind button next to the public domain name.
   
2. On the Bind Public IP page, select an available public IP and click Confirm.
   
   If there is no available public IP in your list, click Create to create a new public IP, then return to this page to configure the binding information. For details on public IP creation operations and fees, refer to the following documents:
   • Apply for public IP
   • Public IP - Billing overview
3. (Optional) After binding is complete, you can click the Details button next to the public domain name to view the currently bound public name and IP address.
   

Unbind public domain name #

Click the Unbind button next to the public domain name, then click Confirm.

Add allowlist #

1. Click the Whitelist Configurationbutton of the Network informationmodule.
   
2. In the text box on the allowlist configuration page, enter the IP address or subnet to add, then click Save.
   
   IP address settings requirements are as follows:
   • Setting "0.0.0.0/0" allows access from all addresses; setting "127.0.0.1/32" denies access from all addresses.
   • If both "0.0.0.0/0" and "127.0.0.1/32" are set, all addresses are allowed access.
   • Only IP address ranges are supported; single IP addresses are not supported. Separate address ranges with either Chinese or English commas, spaces, or line breaks.
   • Once an IP is removed from the allowlist and the change takes effect, any established connections for that IP will be immediately disconnected.
   • Up to 300 IP address ranges can be set.
     If the IP address you entered does not meet the requirements, the system will prompt that it cannot be entered. Please modify it according to the above requirements, or click One-click Clear and the system will automatically clear IP addresses that cannot be entered.
     

Edit allowlist #

Click the Allowlist Configuration button next to the public domain name, in the text box on the allowlist configuration page adjust the IP address, then click Save.

Delete allowlist #

Click the Allowlist Configuration button next to the public domain name, in the text box on the allowlist configuration page delete the IP address, then click Save.