Enabling an IP allowlist for account logins through the web interface

Fastly allows you to define the range of IP addresses authorized on your Fastly account from which users are able to login to the Fastly web interface. This optional IP allowlisting functionality is not enabled by default. It can restrict access to most of Fastly's API endpoints.

Limitations and considerations

If you decide to use optional IP allowlisting, keep the following things in mind:

  • Metrics and stats API endpoints are exempt. Metrics and stats API endpoints, such as historical stats or real-time analytics, do no support allowlisting.
  • An account owner telephone number is required. During setup, Fastly checks your current IP address against the list you provide to ensure you don't lock yourself out of your account. If your IP addresses change at a later date (for example, because you move offices) and you forget to update your allowlist configuration, you will be locked out of your account.
WARNING

If you are locked out of your account, you will need to contact support and request that a Customer Support representative contact your account's owner via telephone during Fastly's regular business hours. To protect your account's security, we will not unlock your account based on an email request alone.

Enabling an IP allowlist for account logins through the web interface

To restrict logins to the Fastly web interface based on a specific list or range of IP addresses, follow these steps.

  1. Log in to the Fastly web interface and select Account from the account menu. Your account information appears.
  2. In the Login IP allowlist field of the Company settings area, replace 0.0.0.0/0 (the default IP range indicating no allowlisting) with the IP addresses for which web interface access to your account should be restricted.

    IP allowlist field with default text indicating allowlisting is disabled

    You can include single or multiple IP addresses or IP ranges (separated by commas) as follows:

    • a single IPv4 address (e.g., replace the default with 192.168.0.1)
    • an IPv4 CIDR range (e.g., replace the default with 192.168.0.0/32)
    • an IPv4 Wildcard range (e.g., replace the default with 192.168.0.*, 192.168.*.1, 192.168.*.*)
  3. Click Update Company.

Disabling an IP allowlist for account logins through the web interface

To disable IP allowlisting on your Fastly account and allow web interface access to any IP range, follow these steps.

  1. Log in to the Fastly web interface and select Account from the account menu. Your account information appears.
  2. In the Login IP allowlist field of the Company settings area, enter 0.0.0.0/0 (the default IP range indicating no allowlisting).
  3. Click Update Company.
Was this guide helpful?

Do not use this form to send sensitive information. If you need assistance, contact support. This form is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.