IP filter that restricts which IP addresses LogScale can connect to when communicating with identity providers. This prevents LogScale from connecting to internal or private IP addresses during authentication flows.

The syntax of the IP address list is a sequence, separated by newlines or ;, of allow or deny actions, along with a CIDR block or all. An IP address is allowed or denied by finding the first match and applying the corresponding action. The all value matches any IP address (that is, IPv4 or IPv6).

For example, here LogScale denies connections to the CIDR block 192.168.0.0/16 and allows all others:

IP_FILTER_IDP=deny 192.168.0.0/16; allow all

The filter denies reserved IP ranges, as specified by the IANA, by default.