Enabling an IP allowlist for account logins through the web interface

Fastly allows you to define the range of IP addresses authorized on your Fastly account from which users are able to login to the Fastly web interface. This optional IP allowlisting functionality is not enabled by default. It can restrict access to most of Fastly's API endpoints.

Limitations and considerations

If you decide to use optional IP allowlisting, keep the following things in mind:

• Metrics and stats API endpoints are exempt. Metrics and stats API endpoints, such as historical stats or real-time analytics, do no support allowlisting.
• An account owner telephone number is required. During setup, Fastly checks your current IP address against the list you provide to ensure you don't lock yourself out of your account. If your IP addresses change at a later date (for example, because you move offices) and you forget to update your allowlist configuration, you will be locked out of your account.

Enabling an IP allowlist for account logins through the web interface

To restrict logins to the Fastly web interface based on a specific list or range of IP addresses, follow these steps.

1. Log in to the Fastly web interface and select Account from the navigation sidebar.

2. In the Login IP allowlist field of the Company settings area, replace 0.0.0.0/0 (the default IP range indicating no allowlisting) with the IP addresses for which web interface access to your account should be restricted.

   

   You can include single or multiple IP addresses or IP ranges (separated by commas) as follows:

   • a single IPv4 address (e.g., replace the default with 192.168.0.1)
   • an IPv4 CIDR range (e.g., replace the default with 192.168.0.0/24, 192.168.0.1/32)
   • an IPv4 Wildcard range (e.g., replace the default with 192.168.0.*, 192.168.*.1, 192.168.*.*)

3. Click Update Company.

Disabling an IP allowlist for account logins through the web interface

To disable IP allowlisting on your Fastly account and allow web interface access to any IP range, follow these steps.

1. Log in to the Fastly web interface and select Account from the navigation sidebar.
2. In the Login IP allowlist field of the Company settings area, enter 0.0.0.0/0 (the default IP range indicating no allowlisting).
3. Click Update Company.