Whitelisting IP addresses for spaces.

Question

Hi

I have an instantance that by nature is internet facing and shared with external parties.

As a team we are moving to this new instance that provdes us with better functionality and access to addons. However the spaces we need to be restricted to everyone including Confliuence admins.

We have the ability to do IP whitelisting whereby we could only allow access to a space from known hosts.

Current page restrictions do not allow the functionality, hence figuring out if incoming IPs can be whitelisted.

It all seems possible until you edit a page and end up with a pageID.

Has anyone tried this and succeeded.

It is a dfficult scenario as there are internal politics.......

Regards

Steve

Kesha Thill · Answer

Hey @Steve Boydon !

I wanted to give you an update on your request above. We've recently launched a beta program for IP allowlisting that's available for Confluence, Jira Software, and Jira Service Desk Cloud Premium customers and evaluators. If you're still interested, you can learn more about the feature and how to enable it by visiting our documentation for IP allowlisting here.

Please reach out if you have questions!

Diego_88dj6o · Answer

Hello there Steve!

As I understand, some internal security policies require that pages are restricted to specific IPs, is that right?

Natively, Confluence does not have this functionality. What we have is IP Whitelisting for specific resources within Confluence. You can check this functionality here Steve:

Configuring the Whitelist

How to allow only certain IP addresses to have access to Confluence

Now, to deal with Specific Pages within Confluence, we would need to create a whitelist for each one of them. This could be done at application level with a Proxy, such as NGINX or Apache.

You could use Redirection Rules or IP Whitelisting with NGINX, for example:

How to Redirect Nginx traffic based on the Client’s IP Address

Blocking/allowing IP-addresses in Nginx

The links about NGINX above are not related to Atlassian, but might give you a good direction on how to proceed with this!

Let us know from you Steve. Looking forward to your reply.