Public Network Access

Scenarios

By default, new repositories cannot be accessed through the Internet. You can configure a whitelist to allow access to a repository through the Internet.

Constraints

You can add a maximum of 300 IP addresses or CIDR blocks to the whitelist when creating a public network access rule.

Procedure

1. Log in to the SWR console. In the upper left corner, switch to your region. In the navigation pane, choose Repositories. Click your repository name.
2. In the navigation pane, choose Access > Access Control.
3. Click the Public Access tab and click Enable Public Network Access. Read the message in the dialog box and click OK.
   Figure 1 Enabling public network access
   

4. Click Create Public Network Access Rule in the upper right corner. In the displayed dialog box, enter or paste the copied CIDR block. Alternatively, click any IP address text box to paste the copied CIDR block. If you need to add multiple CIDR blocks in a batch, click Add One for many times. If you want to allow all IP addresses to access the repository, click Add All. SWR will automatically add two CIDR blocks (0.0.0.0/1 and 128.0.0.0/1) for you.
   

   

   • To reduce the risk of attacks, you are advised to add IP addresses one by one instead of adding a CIDR block.
   • For each repository, only one rule that allows all IP addresses to access the repository can be added.

5. Click OK.
   

   The whitelist cannot be modified. You can only delete it and create a new one.

Follow-up Operations

To access a repository, you also need to create an access credential. For details, see Access Credentials.