# IP Policies

## Introduction

IP policies are named sets of caller IP ranges (office, VPN, CI provider). You
create a policy once and attach it to one or more pools by reference. Edit the
policy and every attached pool picks up the new ranges within a few seconds.

Manage policies under **IP Policies** in the dashboard. Some tiers are
plan-gated; see [Billing](/docs/billing).

## Create a policy

1. Open **IP Policies → Add policy**.
2. Name it and add one or more CIDR ranges.
3. Optionally add a description for your organization.

## Attach to a pool

On the pool's **Access** tab, attach an IP policy. Requests from addresses
outside the allowlist receive `403` before other auth checks and before a
concurrency slot is taken.

## Next steps

- [Access](/docs/pools/access)
- [Admission errors](/docs/knowledge-base/admission-errors)