Adding or Modifying Firewall Rules
When you create a pgEdge Cloud cluster, you can provide firewall rules that define the IP addresses or CIDR blocks that are allowed to connect to your cluster. To add or modify a cluster's firewall rules, highlight the name of a cluster in the navigation tree and select Update Firewall Rules from the Actions (opens in a new tab) drop-down menu.

The Firewall Rules popup displays the currently defined rules for your cluster. You can click the + Add Firewall Rule bar to open a new line (as shown below) and add a new firewall rule, or modify the current rules:

To add or modify a firewall rule:
-
Use the
Typeselector in the left column to specify the incoming connection type. You can create a rule that connects with:- A PostgreSQL client like pgAdmin or psql on port
5432. - An SSH client on port
22. - An HTTPS client on port
443.
- A PostgreSQL client like pgAdmin or psql on port
-
Use the
Sourcesfield in the right column to add or remove the IP address(es) or CIDR block(s) (opens in a new tab) that will be allowed to connect via the connectionTypespecified in the left column.- To remove an address, click the
Xto the right of the address in theSourcesfield. - To add an address, click in the Sources field and select from the predefined options, or type directly in the field. After entering each address, hit
Enterto confirm the addition; you can then add another address to theSourcesfield, or select+ Add Firewall Ruleto open another line for entries.
- To remove an address, click the
When you're finished, select Update Firewall Rules to modify your cluster's firewall. While the firewall is being modified, a blue dot to the left of the cluster name indicates that the changes are being applied. During this time, your cluster remains available for connections, but you must wait to make further modifications to the cluster definition.
When specifying a CIDR block, append the number of bits in the netmask after the address block; for example, the address 10.1.2.0/24 specifies that anyone connecting from an IP address that starts with the prefix 10.1.2 can connect.