Manage IP Groups on Confluent Cloud

IP groups are collections of source CIDR blocks you use to simplify the organization of IP addresses that are allowed to access your Confluent Cloud resources. The sections below describe how to use the Confluent Cloud Console, Confluent CLI, and Confluent Cloud APIs to create, update, describe, list, and delete IP groups.

Additionally, see the following related content:

Specifying CIDR blocks for IP groups

The value for --cidr-blocks flag in the CLI commands must be formatted as a comma-separated list of one or more IPv4 CIDR blocks with no spaces between the CIDR blocks.

For example, the list of CIDR blocks must be formatted as follows:

  • Single CIDR block. Example: 168.150.200.0/24
  • Multiple CIDR blocks. Example: 168.150.200.0/24,147.150.200.0/24

Single IP addresses

If you want to specify a single IP address, you must use the /32 suffix to specify the single IP address as a CIDR block. For example, if the IP address is 16.12.34.56, to add it as a CIDR block, specify the CIDR block as 16.12.34.56/32.

Create an IP group

An admininstrator creates an IP group by adding IPv4 CIDR blocks that define a set of IP addresses. IP groups are used to restrict access to Confluent Cloud resources.

  1. Go to the IP filtering tab on the Accounts & access page at https://confluent.cloud/settings/org/ip-filtering.

    The IP filtering page, with the IP group view, appears.

  2. Click Add IP group. The Add IP group page appears.

  3. In the IP group name field, enter a name for the IP group and in the CIDR block field, enter the IP address range for the IP group. To add additional CIDR blocks, click Add CIDR block as needed.

  4. Click Save to save the IP group. The Accounts & access page reappears displaying the IP groups in the IP grouping section.

When you are finished, you can use IP filters to restrict access to Confluent Cloud resources. For details, see Manage IP Filters on Confluent Cloud.

Update an IP group

  1. Go to the IP filtering tab on the Accounts & access page at https://confluent.cloud/settings/org/ip-filtering.

    The IP filtering page, with the IP group view, appears.

  2. In the table of IP groups, click the name of the IP group under Name that you want to update. The group mapping details page appears.

  3. Click Edit IP group. The IP group details page appears.

  4. Update the values for the current IP group name and CIDR block, click Add CIDR block to add a CIDR block to the IP group, or click “x” to the right of a CIDR block to remove the CIDR block from the IP group.

  5. Click Save to save your IP group updates.

The IP group is updated and the Accounts & access page reappears displaying the IP groups view. section.

Describe an IP group

  1. Go to the IP filtering tab on the Accounts & access page at https://confluent.cloud/settings/org/ip-filtering.

    The IP filtering page, with the IP groups view, appears.

  2. Click the name of the IP group that you want to view. The IP group details page appears, showing the IP group name, IP group ID, and CIDR blocks.

To return to the list of IP groups, click “IP filtering” in the breadcrumb navigation at the top of the page.

List IP groups

  1. Go to the IP filtering tab on the Accounts & access page at https://confluent.cloud/settings/org/ip-filtering.

The IP groups are displayed showing IP group names and IP group IDs. Click on an IP group name to see the details view, which shows the IP group name, IP group ID, and CIDR blocks.

Delete an IP group

  1. Go to the IP filtering tab on the Accounts & access page at https://confluent.cloud/settings/org/ip-filtering.

    The IP filtering page, with the IP group view, appears.

  2. Click IP groups and then click the name of the IP group you want to delete.

    The IP group details view appears.

  3. Click Delete IP group. The Delete IP group page appears.

  4. Enter the IP group name to confirm that you want to delete the IP group, then click Confirm.

The IP group is deleted and the IP group view appears listing the remaining IP groups.