> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tenbyte.io/llms.txt
> Use this file to discover all available pages before exploring further.

# IP Access Policy

> Allow or deny CDN requests by IP address or CIDR range.

Control distribution access at the network level. Allow or deny individual IPs or full CIDR ranges.

<Frame caption="IP Access Policy">
  <img src="https://mintcdn.com/vidinfra/o18Yd19xAyJ2xfJY/images/cdn/26.png?fit=max&auto=format&n=o18Yd19xAyJ2xfJY&q=85&s=2071edc747fbee25e59ef5c1a876c134" alt="IP Access Policy" width="998" height="568" data-path="images/cdn/26.png" />
</Frame>

## Modes

* **Allow by default** — anyone can access; you list IPs/ranges to block.
* **Deny by default** — access blocked; you list IPs/ranges that may pass.

## CIDR notation

Use CIDR to express ranges in a single line.

<Frame caption="CIDR Notation">
  <img src="https://mintcdn.com/vidinfra/o18Yd19xAyJ2xfJY/images/cdn/50.png?fit=max&auto=format&n=o18Yd19xAyJ2xfJY&q=85&s=e6dac85b6f0c9a832ea795a1ce38bdce" alt="IP Access Policy" width="1015" height="588" data-path="images/cdn/50.png" />
</Frame>

| Notation         | Meaning                       |
| ---------------- | ----------------------------- |
| `203.0.113.42`   | Single host                   |
| `203.0.113.0/24` | 256 addresses (one /24 block) |
| `10.0.0.0/8`     | All `10.x.x.x` addresses      |

## When to use this

* Restrict an internal staging origin to your office IP range.
* Block known abusive IPs while keeping the rest open.
* Limit a partner-only feed to their egress IPs.