To ensure that client connections are from particular addresses, add one or more allowClient definitions to the YAML configuration file in the server section. For example:

An allowClient definition takes an IP address, as in the first example above, or a CIDR (Classless Inter-Domain Routing) address range, as in the second example above. With these example entries in the YAML configuration file, the Apama components allow connections from either the localhost (127.0.0.1) or IP addresses where the first 17 bits match the first 17 bits of 192.168.128.0. The Apama components do not accept connections from any other IP addresses. This creates a "whitelist" of allowable IP addresses.

If you specify a YAML configuration file when you start the correlator, and if there are any allowClient definitions in the YAML configuration file, then the Apama components do not allow connections from any IP address that does not fall within one of the allowClient ranges specified. If you do not specify a YAML configuration file when you start the correlator, or there are no allowClient definitions in a YAML configuration file that you do specify, the Apama components accept connections from any client.