# IP Whitelisting

Makini needs network access to connected systems in order to sync data. If the target system is behind a firewall or restricts inbound traffic to specific IP addresses, Makini's IPs must be whitelisted.

In many cases, the system being connected belongs to your customer rather than your own infrastructure. In that scenario, your customer's IT team will need to add the IPs below to their allowlist.

If whitelisting is not possible (e.g., due to strict network policies), Makini supports VPN connections as an alternative. See Connecting On-Premise Systems for details.

## Makini IP Addresses

Add the following IP addresses to your allowlist:

- `15.204.75.108`
- `15.204.73.75`
- `15.204.77.147`
- `148.113.140.236`
- `51.79.101.4`

## Platform-Specific Instructions

<AccordionGroup>
    <Accordion title="AWS">
        #### Security Groups

        1. In the AWS Console, navigate to **EC2 > Security Groups**.
        2. Select the security group associated with your resource.
        3. Click **Edit inbound rules** → **Add rule**.
        4. Set **Source** to `Custom` and enter each Makini IP with a `/32` suffix (e.g., `15.204.75.108/32`).
        5. Set the **Type** and **Port range** to match the protocol and port Makini will access.
        6. Repeat for each IP address and click **Save rules**.
        
        #### Network ACLs

        1. Navigate to **VPC > Network ACLs** and select the NACL for your subnet.
        2. Under **Inbound rules**, click **Edit inbound rules** → **Add rule**.
        3. Set **Source** to each Makini IP with a `/32` suffix, **Allow/Deny** to `ALLOW`, and configure the protocol and port range.
        4. Repeat for each IP address and click **Save changes**.
    </Accordion>
    <Accordion title="Azure">
        #### Network Security Groups

        1. In the Azure Portal, navigate to **Network security groups** and select the NSG for your resource.
        2. Under **Settings**, click **Inbound security rules** → **Add**.
        3. Set **Source** to `IP Addresses` and enter the Makini IP address.
        4. Configure the destination, service, port range, and protocol as needed. Set **Action** to `Allow`.
        5. Repeat for each IP address.
    </Accordion>
    <Accordion title="Google Cloud Platform">
        #### VPC Firewall Rules

        1. In the Cloud Console, navigate to **VPC Network > Firewall** → **Create Firewall Rule**.
        2. Set **Direction of traffic** to `Ingress` and **Action on match** to `Allow`.
        3. Under **Source IP ranges**, enter all Makini IPs: `15.204.75.108, 15.204.73.75, 15.204.77.147, 148.113.140.236, 51.79.101.4`
        4. Configure the target, protocols, and ports as needed. Click **Create**.
    </Accordion>
</AccordionGroup>