Configure network access and firewall

Enable an external endpointCopy Anchor Link

1. Open Connectivity on the memory database.
2. Select Enable domain.
3. Wait for the managed hostname to appear.
4. Open Connection and use the External TLS endpoint to test a connection.

To keep the instance private again, select Disable domain. Private project-network connectivity uses its own endpoint. Do not assume that disabling a public route immediately terminates every established client session.

Configure the IP allowlistCopy Anchor Link

1. Open Firewall Policy.
2. Enable Enable IP allowlist.
3. Add the public addresses or CIDR ranges that should reach the database, including your own client or outbound gateway address.
4. Optionally label entries and select Save policy.
5. Allow routing changes to apply, then test a connection from an allowed address.

Up to 32 entries are supported. A single IPv4 address uses /32; a single IPv6 address uses /128. Enabling the policy requires at least one valid entry.

The database policy restricts the public TCP endpoint. Blocked connections close without an HTTP error page; this is not a web application firewall. Platform management uses separately trusted addresses.

Disabling the policy removes the saved IP list. Copy entries you intend to reuse before turning it off.