---
schema_version: "1"
id: 832b7ee2405bc3c39c25b52dd2093854623fae5dd553aeb934428e6fff6c6e5d
title: Dedicated Load Balancer Allowlists
collection: mulesoft
version: current
locale: en-us
portal_url: https://docs.salesforce.com/mulesoft/current/en-us/cloudhub/lb-allowlists.md
canonical_url: https://docs.mulesoft.com/cloudhub/lb-allowlists
source_site: docs.mulesoft.com
content_type: documentation
content_hash: b1fd94a8a8d7231cb3d587d305bcb8794bcacb0e6f5d5e46ad63da2e42d934e2
description: MuleSoft Documentation Site
latest: true
---
---
product: CloudHub
---

# Dedicated Load Balancer Allowlists

> For the full documentation index, see: https://docs.mulesoft.com/llms.txt

If you want to allow IP addresses access to your dedicated load balancer (DLB), you must add those
IP addresses, in CIDR notation, to the allowlist of the DLB.

> [!NOTE] The allowlist works for inbound connections at the load-balancer level only, not at the CN
> certificate level.

You can either add the allowed IP addresses when you create the DLB or add them to an existing DLB
using either Runtime Manager or the command-line interface.

## DLB Allowlist Entry Limits

The maximum number of IP address entries that you can add to the DLB allowlist depends on the
inbound HTTP mode setting in the DLB configuration, which specifies the behavior of the DLB when
receiving an HTTP request.

<table><colgroup><col> <col></colgroup><thead><tr><th>Inbound HTTP Mode</th><th>Maximum Allowlist Entries</th></tr></thead><tbody><tr><td><p><strong>Off</strong></p></td><td><div><div><p>240</p></div></div></td></tr><tr><td><p><strong>On</strong></p></td><td><div><div><p>120</p></div></div></td></tr><tr><td><p><strong>Redirect</strong></p></td><td><div><div><p>120</p></div></div></td></tr></tbody></table>

> [!NOTE] If the number of entries in the DLB allowlist exceeds 120, you can’t set HTTP mode to
> **On**.

## Add an IP Address to the Allowlist of an Existing DLB

To add an IP address to the allowlist of a DLB using Runtime Manager:

1.  From Anypoint Platform, click **Runtime Manager**.

2.  Click **Load Balancers** and then click the load balancer name.

3.  In the **Allowlisted CIDRs** tab, click **Add New CIDR**:

    ![\*Add New CIDR\* option in the load balancer settings page](/mulesoft/current/en-us/cloudhub/_images/lb-allowlist-update.png)

    Figure 1. The arrow shows the **Add New CIDR** option in the **Allowlisted CIDRs** tab.

4.  Enter the IP address in valid CIDR format (for example, `10.2.0.0/16`).

5.  Click **Add To List**.

6.  If you want to delete a CIDR, hover over the **…​** icon to display the trash can icon.

7.  Click **Apply Changes**.

To add a range of IP addresses to the allowlist for a DLB using the CLI:

cloudhub load-balancer allowlist add myLB\_name myCIDRblock

The IP addresses must be in valid CIDR format (for example, `10.2.0.0/16`).

If you want to remove IP addresses from the allowlist:

cloudhub load-balancer allowlist remove myLB\_name myCIDRblock

## See Also

- [cloudhub load-balancer allowlist add](https://docs.mulesoft.com/cloudhub/cloudhub-cli#cloudhub-load-balancer-allowlist-add)

- [cloudhub load-balancer allowlist remove](https://docs.mulesoft.com/cloudhub/cloudhub-cli#cloudhub-load-balancer-allowlist-remove)

- [IPv4 CIDR blocks](https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing#IPv4_CIDR_blocks)

- [Create a Load Balancer with Runtime Manager](https://docs.mulesoft.com/cloudhub/)

- [Create a Load Balancer with the Anypoint Platform CLI](https://docs.mulesoft.com/cloudhub/lb-create-cli)

- [Internal Worker DNS vs Internal DLB DNS in CloudHub](https://help.salesforce.com/s/articleView?id=001116315&type=1)