To include a service or website in the whitelist, you need to submit a request to the Ministry of Digital Development. Only the owner, who is a legal entity or an individual entrepreneur, can submit a request. Individuals cannot submit a request. Each request is reviewed by the Ministry of Digital Development individually.
Mintsifry may request confirmation that the specified IP addresses are located in the Servercore infrastructure. To get this confirmation, create a ticket.
Requirements for the IP address
The IP address must be located in Russia and must be allocated in the Servercore infrastructure exclusively for your website or service.
Products where IP addresses can be allocated exclusively for your service or website:
Dedicated servers;
Cloud servers;
Managed Kubernetes;
Cloud load balancers;
Firewalls;
Cloud powered by VMware.
In some products, IP addresses cannot be allocated for your service or website:
VDS servers — one public IP address from a shared subnet is allocated per server; you cannot assign an IP address of another type. Instead of a VDS server, you can create a cloud server in a public subnet;
S3 — service IP addresses that process traffic from many users simultaneously are used to access buckets. To have a dedicated IP address, you can deploy your own solution on a dedicated server or cloud server, which will receive traffic on the IP address of the dedicated or cloud server and proxy traffic to S3;
CDN — service IP addresses of multiple CDN servers are used to access content, which cannot be allocated exclusively for your service or website.
Get information about a service or website IP address
If the IP address is not dedicated solely to your service or website, change the IP address. Changing the IP address is not supported for all products.
1. Check if the IP address is located in Russia
The IP address is in the same location as the device to which it is assigned.
Hardware firewalls and Cloud powered by VMware are located in Russia. To check the device location in other products, see the instructions:
Dedicated server
Cloud server
Managed Kubernetes
Cloud load balancer
Firewalls
In the control panel, in the top menu, click Products and select Dedicated Servers.
In the Servers section, in the server card under its name, check the server location.
If the server is not located in Russia, order a dedicated server in Russia; when ordering the server, select a dedicated VLAN for it.
In the control panel, in the top menu, click Products and select Cloud Servers.
In the Servers section, in the server card under its name, check the server location.
If the server is not located in Russia, create a cloud server in Russia; when creating the server, select a public subnet for it.
In the control panel, in the top menu, click Products and select Managed Kubernetes.
In the cluster card, in the Pool field, check the cluster location.
If you created a load balancer in Russia, re-create the cloud servers behind the load balancer in Russia, in the same location as the load balancer.
You can get information depending on the firewall type — hardware or virtual:
hardware firewalls are located in Russia;
you deploy virtual firewalls yourself on a cloud server or in the VMware-based cloud. IP addresses in the VMware-based cloud are located in Russia, while in a cloud server, they may be located outside of Russia.
If you have a virtual firewall deployed on a cloud server, check the server location:
In the control panel, in the top menu, click Products and select Cloud Servers.
In the Servers section, in the server card under its name, check the server location.
If the server is not located in Russia, create a cloud server in Russia; when creating the server, select a public subnet for it.
2. Look up the IP address
Dedicated server
Cloud server
Managed Kubernetes
Cloud load balancer
Firewalls
Cloud powered by VMware
In the control panel, in the top menu, click Products and select Dedicated Servers.
In the server card next to the public IP address, click and view the IP address.
Check if the IP address is allocated for your service or website:
if a numbered VLAN is specified next to the IP address, for example VLAN — 1234, a public dedicated IP address is used on the server, which is dedicated to your service or website;
if VLAN — Shared is specified, a public shared IP address is used on the server, which is not dedicated to your service or website. You can change the IP address.
In the control panel, in the top menu, click Products and select Cloud Servers.
Open the server page → Ports tab.
See the IP address in the public network port card.
Check if the port IP address is allocated for your service or website:
if a public IP address is specified, for example 203.0.113.4, and a public subnet with a mask, for example 203.0.113.0/29, an IP address from a public subnet is used on the server, which is dedicated to your service or website;
if only a public IP address is specified, for example 203.0.113.4, a direct public IP address is used on the server, which is not dedicated to your service or website. You can change the IP address;
if a pair of IP addresses is specified, for example 192.168.10.21 ← 203.0.113.4, and a private subnet with a mask, for example 192.168.10.21/24, a public floating IP address is used on the server, which is not dedicated to your service or website. You can change the IP address.
By default, a Managed Kubernetes cluster is created with a public Kube API IP address that cannot be dedicated to your service or website. To access the cluster via an IP address that is dedicated solely to your service or website, a load balancer with an IP address from a public subnet must be created for the cluster.
If the cluster does not have a load balancer, create a load balancer in a public subnet; to do this, go to step 3.
In the control panel, in the top menu, click Products and select Cloud Servers.
Go to the Load Balancers section.
Open the load balancer page.
In the Network field, check the load balancer IP address.
Check if the IP address is allocated for your service or website:
if a public IP address is specified, for example 203.0.113.4, and a public subnet with a mask, for example 203.0.113.0/29, an IP address from a public subnet is used on the server, which is dedicated to your service or website;
if a pair of IP addresses is specified, for example 192.168.10.21 ← 203.0.113.4, and a private subnet with a mask, for example 192.168.10.21/24, a public floating IP address is used on the server, which is not dedicated to your service or website. You can change the IP address.
In the control panel, in the top menu, click Products and select Cloud Servers.
Go to the Load Balancers section.
Open the balancer page.
In the Network field, check the load balancer IP address.
Check if the IP address is allocated for your service or website:
if a public IP address is specified, for example 203.0.113.4, and a public subnet with a mask, for example 203.0.113.4/29, an IP address from a public subnet is used on the load balancer, which is dedicated to your service or website;
if a pair of IP addresses is specified, for example 192.168.10.21 ← 203.0.113.4, and a private subnet, for example 192.168.0.0/24, a public floating IP address is used on the load balancer, which is not dedicated to your service or website. You can change the IP address.
You can look up the IP address depending on the firewall type — hardware or virtual:
a hardware firewall is placed in a public dedicated subnet by default, and IP addresses from it are dedicated solely to your service or website. You can view the IP address in the control panel: in the top menu, click Products → Firewalls → in the firewall card, check the IP address;
you deploy a virtual firewall yourself on a cloud server or in the VMware-based cloud, and the server IP address is used for access. Depending on where the firewall is deployed, check the IP address using the instructions for a cloud server or the VMware-based cloud.
All public IP addresses in Cloud powered by VMware are allocated exclusively for your service or website.
In the control panel, in the top menu, click Products and select VMware-based Cloud.
In the Virtual Data Centers section, open the data center page.
To see the IP address:
Edge router — open the Edge Routers tab → router IP address list.
from a Direct Connected subnet — open the Direct Connected Subnets tab.
To access the cluster via an IP address that is dedicated solely to your service or website, you need to create a load balancer for the cluster with an IP address from a public subnet.