Whitelisting UI Access Hosts (On-Premise Deployments)

AppViewX Web UI is typically accessed via Istio ingress (NodePort) and/or a Load Balancer URL. This topic explains how to whitelist the hostnames/IPs (URLs) that are allowed to access the AppViewX Web UI in on-premise deployments.

Purpose

Whitelisting controls which hostnames or IP addresses are permitted to access the AppViewX Web UI. Use the procedures below to view the default behavior and to add additional hosts after installation.

Prerequisites

  • Run the utility from the installer node, under the scripts/ directory.

Default Behavior (During Installation)

By default, AppViewX whitelists the ingress hosts derived from the installer configuration (for example, values from INGRESS_HOST / ingress hosts). The whitelist includes both:

  • IP addresses
  • Hostnames / FQDNs (resolved where applicable)

If you need to whitelist anything beyond those ingress hosts post installation (for example, a Load Balancer DNS, additional aliases, extra VIPs, and so on), use the utility described below.

Utility: Whitelist Additional UI Access Hosts

You can update the whitelist at any time using the following commands:

cd <appviewx_installer_dir>/scripts
./appviewx.sh --whitelist-ingress-hosts
Important: This activity replaces the existing whitelist with the values you provide.