IP sets

IP sets are named lists of IPv4/IPv6 addresses and CIDRs. Create a list once, then reference it in firewall rules as source or destination instead of repeating the same addresses in every rule.

Steps

1. Open Datacenter → IP sets.
2. Click Add and enter a short Latin name (up to 15 characters).
3. Select the IP set and click Add address to add hosts or CIDRs (IPv4 up to /24, IPv6 up to /64).
4. Open VM → Firewall (or a security group’s rules) and create or edit a rule.
5. In Source Address or Destination Address, choose the IP set from Use IP set…, or type +name manually.
6. Later changes to the IP set members apply everywhere that set is referenced.

Watch out

• An IP set only affects traffic when a firewall rule uses it and the VM firewall is enabled (Global Status = On on VM → Firewall).
• Direct CIDR in a rule is still limited to /26; members inside an IP set may be IPv4 up to /24 or IPv6 up to /64.
• Deleting an IP set clears that reference from rules that used it.