Skip to main content
Warning This document has not been updated for a while now. It may be out of date.
Last updated: 17 Sep 2020

Restrict PaaS applications to GDS office IPs

When deploying applications to the PaaS, it is possible to limit access to the application to GDS office IPs only.

You need to create your application on the PaaS and then bind the route to the GOV.UK PaaS Office IP route service. The route service safelists GDS office IPs and will pass requests from office IPs through to your application on the PaaS.

To bind the route to your application to the route service, do the following:

cf bind-route-service cloudapps.digital govuk-paas-office-ip-router-service --hostname APP_NAME

Comprehensive documentation can be found in the PaaS tech docs.