Server Access Controls for DeployR
Learn about the following server access controls.
Working with IP Address Filters
While access to DeployR is typically controlled by authentication mechanisms, DeployR also supports access controls based on IP address filters. Under the Server Policies tab in the DeployR Administration Console, you can configure your IP address filter policy. The Operation Policies for authenticated, asynchronous, and anonymous operations each support an IP filter property. If you assign an IP filter to this property, then any attempt by a client application to connect from outside of the IP address range on that filter will be automatically rejected.
For example, you can make your DeployR server instance accessible only from IP addresses on the local LAN or VPN, such as
10.xxx.xxx.xxx. Note that it is possible to achieve these same kinds of access controls with an appropriate configuration on your firewall and/or routers.
Cross-Origin Resource Sharing
Cross-Origin Resource Sharing (CORS) enables your client application to freely communicate and make cross-site HTTP requests for resources from a domain other than where the DeployR is hosted. CORS can be enabled or disabled in the DeployR external configuration file,
$DEPLOYR_HOME\deployr\deployr.groovy. In DeployR Enterprise, support for CORS is disabled by default.
To enable CORS support:
Update the relevant properties in
cors.enabled = true.
/* * DeployR CORS Policy Configuration * * cors.headers = [ 'Access-Control-Allow-Origin': 'http://app.example.com'] */ cors.enabled = false
Optionally, to restrict cross-site HTTP requests to only those requests coming from a specific domain, specify a value for