# Has anyone restricted access to the rack API service? I would like to only allow access through a Tailscale VPN connection

**URL:** <https://community.convox.com/t/has-anyone-restricted-access-to-the-rack-api-service-i-would-like-to-only-allow-access-through-a-tailscale-vpn-connection/949>\
**Category:** Rack (Version 3)\
**Created:** [June 1, 2024, 10:46am UTC](https://community.convox.com/t/has-anyone-restricted-access-to-the-rack-api-service-i-would-like-to-only-allow-access-through-a-tailscale-vpn-connection/949 "2024-06-01T10:46:35Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![nathan.f77](https://yyz1.discourse-cdn.com/flex029/user_avatar/community.convox.com/nathan.f77/32/256_2.png) [@nathan.f77](https://community.convox.com/u/nathan.f77)\
**Post date:** [June 1, 2024, 10:46am UTC](https://community.convox.com/t/has-anyone-restricted-access-to-the-rack-api-service-i-would-like-to-only-allow-access-through-a-tailscale-vpn-connection/949/1 "2024-06-01T10:46:35Z")

</div>

I would like to prevent public access to the API service and only allow access from the private  
network. I just set up a [Tailscale subnet router service](https://tailscale.com/kb/1019/subnets) to access some private services that I’m running on [render.com](http://render.com), and this gave me the idea to also set it up for my Convox rack. It feels a bit dangerous to have the convox API service open to the public internet.

How can I set up a security group / firewall rules to only allow requests to the API from the private network?

---

<div class="post-metadata">

**Author:** ![Nick-Convox](https://yyz1.discourse-cdn.com/flex029/user_avatar/community.convox.com/nick-convox/32/250_2.png) [@Nick-Convox](https://community.convox.com/u/Nick-Convox)\
**Post date:** [July 9, 2024, 12:23am UTC](https://community.convox.com/t/has-anyone-restricted-access-to-the-rack-api-service-i-would-like-to-only-allow-access-through-a-tailscale-vpn-connection/949/2 "2024-07-09T00:23:19Z")

</div>

Hey @nathan.f77

We have this coming as a feature in the next couple of release cycles.

Regards,  
Nick

---

<div class="post-metadata">

**Author:** ![Nick-Convox](https://yyz1.discourse-cdn.com/flex029/user_avatar/community.convox.com/nick-convox/32/250_2.png) [@Nick-Convox](https://community.convox.com/u/Nick-Convox)\
**Post date:** [September 23, 2024, 12:14pm UTC](https://community.convox.com/t/has-anyone-restricted-access-to-the-rack-api-service-i-would-like-to-only-allow-access-through-a-tailscale-vpn-connection/949/3 "2024-09-23T12:14:01Z")

</div>

Hey @nathan.f77 we have added this [feature](https://github.com/convox/convox/releases/tag/3.18.9) in release `3.18.9`

Regards,  
Nick