Skip to content
Skip to content
PGB Learn

Network access and IP allowlists

Restrict which IP addresses may call your database's endpoints, and what is enforced where.

Updated Nov 12, 2026

Open Databases > Network Access (Network Security & Firewall).

What it controls

Depending on your database, the allowlist is either enforced at the connection pooler (only allowed IPs can connect and call edge functions) or applied to function calls only (it does not restrict direct PostgreSQL connections). The page states which applies. Connections always require TLS; unencrypted connections are rejected.

Lock down by IP

  1. Choose + Add Current IP to add your detected address, or + Add IP Address / CIDR to type an address or block (for example 203.0.113.7/32).
  2. Add a Comment / Description.
  3. Choose Lock Down by IP, choose which rules are active, then Enforce IP Lockdown Now. Tick Include My Current IP so you do not lock yourself out.

The status then reads RESTRICTED (Active). Switch to Allow All returns to ALLOW_ALL (Open).

Manage rules

Each rule has an Allow Access toggle, Edit and Delete. The table shows who added it and when.

Good to know

  • Without any rules the database is open to anyone with valid credentials.
  • Home and mobile IPs change; use ranges carefully.
  • After changing rules, run Connection Check on the Connection page. See Connection strings.
  • Use strong role keys as well. See Connection strings.

More guides in Console: databases