8.4.10. ClickHouse security

Access restriction is configured in the "ClickHouse" section on the "Security" tab:

Using the "Add IP address" button, you can add IP addresses / hosting accounts and select the ports to which they should have access. The set of ports can be changed later.

If the site connecting to the instance is located on our hosting, then instead of an IP address, you should add the hosting account with this site to the security settings. This will ensure that the site has access to the instance during the migration of the hosting account between servers (for example, when changing the country, plan, or for technical reasons).

The access restriction mode depends on the selection of ports for entries in the list and the "Firewall status" switch:

• The port is selected in the settings of one or more entries and the firewall is enabled — the instance can only be connected to via this port from these IP addresses / hosting accounts; access is denied to all others.
• The port is not selected in the settings of any of the entries, or the firewall is disabled — the instance can be connected to via this port from any IP address.

For each entry in the list, you can add comments.