# Static IP for allowlisting: give your team one fixed address URL: https://cloudj.net/blog/static-ip-allowlisting-proxy Published: 2026-11-11 · Updated: 2026-11-11 > Need a static IP for allowlisting an admin panel or API? Compare a dedicated proxy, a VPN and a VPS, then set up one fixed IP that your whole team can share. Many services only accept connections from known addresses: a payment provider's API, a bank or marketplace admin panel, a client's staging server, a database firewall. If your team works from home connections, coworking spaces and phone hotspots, you do not have a known address. A static IP for allowlisting solves that. You register one fixed address with the service, and everyone on the team reaches it through that address. This article explains the three common ways to get that address, helps you pick one, and walks through the dedicated proxy route step by step. ## The problem allowlists create for distributed teams An IP allowlist (or whitelist) is a simple security control: the service drops every request that does not come from an approved address. It works well for an office with a fixed line. It breaks down when: - Home broadband addresses change after a router restart or a contract change. - Staff travel, or work from a café or a phone hotspot. - Freelancers join for a few weeks and need access from wherever they are. - The service limits how many addresses you may register, so you cannot list every home connection. The usual answer is to give the service one address that never changes, and route the team's traffic for that service through it. ## Three ways to get a static IP for allowlisting | Option | What you get | Good for | Watch out for | |---|---|---|---| | Dedicated proxy | One fixed IP that browsers and HTTP tools use for selected traffic | Web admin panels, REST APIs, dashboards | Covers HTTP and SOCKS5 traffic only, no UDP | | VPN on a VPS | A private tunnel; all traffic from a device can leave via the server's IP | SSH, databases, internal tools, mixed protocols | You run and patch the server yourself | | Bastion or jump VPS | A server with a fixed IP that you log in to, then work from | Server administration, scripts that run in one place | People work on a remote machine, not their own browser | A short decision path: 1. If the allowlisted thing is a website or HTTP API and people use it from their own browsers or scripts, a dedicated proxy is the least work. 2. If you need SSH, database ports or anything non-HTTP from laptops, run a VPN on a small cloud server. The [proxy vs VPN comparison](https://cloudj.net/blog/proxy-vs-vpn) goes deeper. Note that Cloudj's [VPN service](https://cloudj.net/vpn-service) is the same dedicated-IP proxy product (HTTP and SOCKS5), not a device-wide tunnel, so for SSH or database access you run the VPN on your own server. 3. If the jobs that need access are automated (cron, sync scripts, CI), put them on a [cloud server](https://cloudj.net/cloud-servers) and allowlist that server's IP directly. You can also build your own proxy on a VPS. That gives full control, but you maintain it; [running your own proxy vs buying a dedicated one](https://cloudj.net/blog/own-proxy-on-vps-vs-dedicated-proxy) compares the effort. ## Why a dedicated proxy works well for allowlisting A dedicated IPv4 proxy from Cloudj is a static ISP proxy: a static IP registered to an ISP and assigned to one customer only. Nobody else's traffic leaves from it, which is what you want when that address is a key to an admin panel. It also stays the same for as long as the order runs, and auto-renew from your balance keeps the same proxy running across terms. Proxies are available in Vietnam, the United States, Japan, South Korea, Singapore, Hong Kong and the United Kingdom. The [dedicated proxy guide](https://cloudj.net/blog/dedicated-proxy-guide) explains the product in full. Pick the country where the service expects you. A Vietnamese marketplace seller centre or local bank portal is a natural fit for a [Vietnam proxy](https://cloudj.net/proxy-ipv4/vietnam); a US payment dashboard fits a [US proxy](https://cloudj.net/proxy-ipv4/united-states). ## Setting it up step by step ### 1. Order one proxy In the [Cloudj console](https://app.cloudj.net), order one dedicated IPv4 proxy in the right country, for a 1, 3, 6 or 12 month term. It is paid from your account balance and is usually ready within a few minutes. Turn on auto-renew: if the proxy lapses, you lose the address you registered and have to update every allowlist. ### 2. Register the proxy IP with the service Copy the proxy's IP from the console and add it to the service's allowlist. Keep a note of which services know this address; you will need that list if you ever change it. ### 3. Choose how your team authenticates to the proxy There are now two layers of allowlisting, and it is easy to confuse them: - The **service** allowlists the proxy's IP. - The **proxy** decides who may use it, either with a username and password (the default) or with its own IP whitelist of up to 20 addresses, which replaces password access. For a distributed team with changing home addresses, username and password is the practical choice. For an office with a fixed line, the proxy whitelist means nobody handles a password. [Whitelist vs password authentication](https://cloudj.net/blog/proxy-authentication-whitelist-vs-password) explains the trade-offs. ### 4. Configure only the traffic that needs it You rarely want all browsing to go through the proxy. A separate browser profile used only for the allowlisted tools keeps things clear; [proxy setup for Chrome and Firefox](https://cloudj.net/blog/setup-proxy-chrome-firefox) shows how. For scripts and command-line tools, set the proxy per command: ```bash curl -x http://USER:PASS@HOST:PORT https://api.example.com/v1/status ``` or for a single shell session: ```bash export HTTPS_PROXY=http://USER:PASS@HOST:PORT python sync_orders.py ``` Many HTTP libraries read `HTTPS_PROXY` automatically. To confirm what address the service will see, run the checks in [testing a proxy with curl](https://cloudj.net/blog/test-proxy-curl). ### 5. Plan for staff changes When someone leaves, rotate the proxy password from the console; the old one stops working, and nobody needs to touch the service's allowlist. Every time someone views the proxy credentials in the console, the view is logged and you get a notice, so you can see who has looked. ## Common uses - **Marketplace and ad platforms.** Seller centres and ad accounts are often accessed by several people. A fixed IP keeps logins consistent; see [proxies for ecommerce sellers in Vietnam](https://cloudj.net/blog/ecommerce-seller-proxy-vietnam), [Facebook ads proxies](https://cloudj.net/blog/facebook-ads-proxy) and [US TikTok proxies](https://cloudj.net/blog/tiktok-proxy-us) for platform-specific notes. Follow each platform's rules on access. - **Payment and banking APIs.** Many require a registered source IP for API calls. - **Client staging servers.** Agencies can give a client one address to allowlist instead of a list of employee homes. - **Internal admin panels.** A cheap extra layer on top of passwords and two-factor login. An allowlist is an extra layer, not a replacement for strong passwords, two-factor authentication and per-user accounts on the service itself. ## When a proxy is not the answer If the service needs SSH, a database protocol, or anything that runs over UDP, a proxy that carries HTTP and SOCKS5 is the wrong shape; a VPN or a bastion server is cleaner. If one automated job is the only thing that needs access, running that job on a VPS with its own fixed IP removes a moving part. ## FAQ ### Does the proxy IP ever change? It stays the same for as long as the order is active. Keep auto-renew on so the order does not expire. ### Can several people use one proxy at the same time? Yes. Everyone authenticates to the same proxy, and the service sees one address. ### Should I order a second proxy as a backup? If the allowlisted service is business-critical, registering two addresses is reasonable, and most allowlists accept several entries. ### Will banks and payment providers accept a proxy IP? Usually the requirement is simply a fixed, registered address. Check the provider's documentation; Cloudj static residential ISP proxies in the US and Vietnam are an option where a home-broadband address is preferred. ## Get your fixed address Order a dedicated proxy in the [Cloudj console](https://app.cloudj.net), register its IP once, and let your team work from anywhere. Current prices per IP are on the [pricing page](https://cloudj.net/pricing).