Restrict PaaS applications to GDS office IPs
When deploying applications to the PaaS, it is possible to limit access to the application to GDS office IPs only.
You need to create your application on the PaaS and then bind the route to the GOV.UK PaaS Office IP route service. The route service safelists GDS office IPs and will pass requests from office IPs through to your application on the PaaS.
To bind the route to your application to the route service, do the following:
cf bind-route-service cloudapps.digital govuk-paas-office-ip-router-service --hostname APP_NAME
Comprehensive documentation can be found in the PaaS tech docs.