NetworkingSecurity
IP allowlisting for TCP and UDP ports
Restrict who can reach a proxied port by attaching allowed CIDR ranges to it.
Every TCP or UDP ingress port can now carry a list of allowed source ranges. Traffic from anywhere else is dropped at the load balancer, before it ever reaches your service.
Set the ranges when you add a port, or edit them later from the networking tab. Leave the list empty to keep the port open to the world.