Skip to main content
All glossary terms

Proxy & networking

IP allowlist

An IP allowlist is a rule set that permits connections from specified IP addresses or ranges and rejects other sources at the enforcing boundary. It is a network access control, not user authentication, and the observed source may be a NAT gateway or intermediary rather than an individual device.

Also known as IP whitelist, source IP allowlist.

Why it matters in practice

Allowlist entries need maintenance when addresses or network paths change. Teams should understand which address the service evaluates and avoid treating a permitted network as proof of a trusted user or request. Layering an allowlist with identity and application authorization provides distinct controls.

Example

An operator allows a test gateway’s documented egress address to reach a proxy and separately requires each client to authenticate.

Educational note

This definition is general information, not legal advice. It may omit facts that matter to a specific situation and does not establish or guarantee compliance.