Skip to content

Latest commit

 

History

History
60 lines (41 loc) · 2.58 KB

ip-addresses.md

File metadata and controls

60 lines (41 loc) · 2.58 KB
Raw
copyright lastupdated keywords subcollection
years
2020, 2024
2024-10-09
IBM Cloud Shell, cloud shell, cloud shell service, cloud shell ip addresses, cloud shell allowlist, cloud shell blocklist
cloud-shell

{{site.data.keyword.attribute-definition-list}}

{{site.data.keyword.cloud-shell_notm}} session IP ranges

{: #cs-ip-ranges}

If you want to restrict access to {{site.data.keyword.cloud-shell_full}} from your service, you can allowlist specific IP addresses or ranges of IP addresses on your deployment. {: shortdesc}

If you use an allowlist or blocklist to control connections in your environment, you can use the following IP information to allowlist access to {{site.data.keyword.cloud-shell_short}}. Ensure that you allowlist all of the subnet ranges for the entire region where your deployments are.

You can configure the allowed and blocked IP list in your target service's IP list settings for traffic that is going to or coming from {{site.data.keyword.cloud-shell_short}}.

You can use a {{site.data.keyword.cloud-shell_short}} session as a terminal to use SSH to log in to your VSI. For example, if you use IBM Security Group to protect your VSI, you need to know the IP address range of {{site.data.keyword.cloud-shell_short}} in a particular region.

{{site.data.keyword.cloud-shell_short}} does not have privileged access to {{site.data.keyword.cloud_notm}} resources. It has the same access as the locally installed {{site.data.keyword.cloud_notm}} CLI or the {{site.data.keyword.cloud_notm}} console. {: note}

Current ingress IP ranges

{: #current-ranges}

Tables 1 - 3 list the IP ranges for each region.

{{site.data.keyword.cloud-shell_short}} ingress IP ranges for us-south (Dallas)

{: #dallas-ip-range}

Data center location Subnet
Dallas 10 169.46.9.208/28
Dallas 10 169.46.97.32/27
Dallas 12 169.48.197.32/28
Dallas 12 169.48.231.32/27
Dallas 13 67.228.112.80/28
Dallas 13 67.228.231.192/27
{: caption="Cloud Shell ingress IP ranges for us-south (Dallas)" caption-side="bottom"}

{{site.data.keyword.cloud-shell_short}} ingress IP ranges for eu-de (Frankfurt)

{: #frankfurt-ip-range}

Data center location Subnet
Frankfurt 2 169.50.22.224/27
Frankfurt 4 161.156.184.160/28
Frankfurt 4 161.156.185.160/27
Frankfurt 5 149.81.65.224/28
Frankfurt 5 149.81.112.128/27
{: caption="Cloud Shell ingress IP ranges for eu-de (Frankfurt)" caption-side="bottom"}