ZStack Cloud Platform
Single Server, Free Trial for One Year
-
Documentation&Tools
Comprehensive product documentation and tools
-
Support & Services
Upholding the value of Customer First and the mission of Serving Customer, ZStack is dedicated to providing secure and stable services for customers.
-
Training & Certification
To educate ZStack partners and interested individuals about cloud computing and to cultivate cloud computing talent.
-
Content
ZStack provides innovative cloud infrastructure for ten major industries
VMware-to-ZStack Case Collection
The report provides three major
solutions and customer case studies for transitioning from VMware to ZStack.
ZStack Cloud 5.4.0>ZStack Cloud Product Manuals>ZStack Cloud User Guide>Operational Management>Access Control
Access Control
Console Proxy
Console proxy allows you to log in to a VM instance by using the IP address of a proxy. You can view the information about the proxy used to launch your VM console.
- The console proxy address only needs to be modified on the management node.
- The address of default proxy is the IP address of the management node.
- You can launch the VM console properly only when the state and status is Enabled and Connected, respectively.
AccessKey Management
An AccessKey pair is a security credential that one party authorizes another party to call API operations and access its resources in the Cloud. AccessKey pairs shall be kept confidential.
ZStack Cloud provides two types of AccessKey: local AccessKey and third-party AccessKey.
Note:
- Local AccessKey:
A local AccessKey pair consists of an AccessKey ID and AccessKey secret. It is a security credential that the Cloud authorizes a third-party user to call API operations and access its cloud resources. AccessKey pairs shall be kept confidential. An AccessKey pair has the full permissions of its creator.
- Third-party AccessKey:
A third-party AccessKey pair consists of an AccessKey ID and AccessKey secret. It is a security credential that a third-party user authorizes the Cloud to call API operations and access its cloud resources. AccessKey pairs shall be kept confidential.
Note: - AccessKey is a key factor for the Cloud to perform security authentication on API requests. We recommend that you keep your AccessKey confidential to maintain securities.
- If your AccessKey is at risk of leakage, we recommend that you delete it in time and create a new one.
IP Allowlist/Blocklist
An IP allowlist or blocklist identifies and filters IP addresses that access the Cloud. You can create an IP allowlist or blocklist to improve access control of the Cloud.Note: You can enable the IP allowlist and blocklist feature as needed. To configure it, follow these steps:
Note: You can enable the IP allowlist and blocklist feature as needed. To configure it, follow these steps:Go to . Set IP Allowlist/Blocklist to true. By default, this setting is set to false.
How IP Allowlist and Blocklist Work
- No IP allowlist or blocklist added: By default, login requests from any IP address are allowed.
- Only blocklist added: IPs in the blocklist are denied access to the platform, while all other IPs are allowed.
- Both allowlist and blocklist added: The allowlist takes precedence over the blocklist.
- IPs in the allowlist are permitted to access to the platform.
- If the same IP is added to both the allowlist and blocklist, the allowlist takes precedence, allowing login requests from that IP.
Note: - If a login attempt is made from an IP address that is not allowed, the system will block the request during the login process.
- If a load balancer forwards login requests to the platform, ensure that the X-Forwarded-For header is properly configured on the load balancer. If not configured, the platform cannot retrieve the actual client IP and will not be able to accurately allow or block access from that client.
- The allowlist cannot be used independently. Before using it, ensure that at least one entry is added to the blocklist. Otherwise, the allowlist will not take effect.
Add IP Allowlist and Blocklist
On the IP allowlist and blocklist page, you can choose to add an IP allowlist or an IP allowlist. The process is the same for both. The following section introduces adding an IP blocklist.
On the main menu of ZStack Cloud, choose . On the IP Allowlist/Blocklist page, click Add IP Blocklist. Then, the Add IP Blocklist page is displayed.
On the displayed page, set the following parameters:
- Name: Set a name for the IP blocklist.
- Description: Optional. Enter a description for the blocklist.
- IP Address: Enter the IP address to be added to the blocklist.Note:
- You can enter fixed IP addresses, IP address ranges, and IP/mask formats. Separate multiple entries with English commas.
- Supports adding up to 100 entries.
| Action | Description |
|---|---|
| Add IP Allowlist/Blocklist | Add a new IP allowlist or blocklist.Note: Once added, the blocklist or allowlist takes effect immediately. IP addresses in the list will be denied or allowed access to the platform. Proceed with caution. |
| Edit Name and Description | Edit the name or description of an existing IP allowlist or blocklist. |
| Delete IP Allowlist/Blocklist | Delete the selected IP allowlist or blocklist.Note: Once deleted, the allowlist or blocklist will no longer be effective, and there will be no IP restrictions for logging into the platform. Proceed with caution. |
Next Chapter: Application Market