Network access

Choose who can reach your database: public with TLS, only your trusted networks, or private to the apps in your project.

You decide where connections to your database may come from. The same choices apply to Plexivo Postgres, Plexivo MySQL and Plexivo Cache, on each resource’s Network tab.

Choose the access#

Under Access, choose one and then Save network access:

Public, with TLS: Reachable from the internet with its password, over an encrypted connection. New databases start this way. Limit it to trusted networks below.
Private: No internet address. Apps and Kubernetes in the same project, the Plexivo console, the Data API and the Plexivo CLI tunnel reach it. Apps in your other projects cannot.

Trusted networks#

A public database can accept connections only from addresses you list. Under Trusted networks, enter an IPv4 address such as 203.0.113.7 or a range such as 203.0.113.0/24 and choose Add, or choose Add my IP. Changes take effect in about a minute.

Ranges from /8 to /32 are accepted; private and reserved address ranges are not. By default, each database can hold this many entries:

Plan	Trusted networks per database
Developer	5
Startup	10
Business	20
Enterprise	50

For a server outside PlexivoAdd your server’s outbound IP addresses, not your office’s. Your laptop does not need to be listed: the Plexivo CLI tunnel works with any setting.

Private databases#

A private database has no address on the internet. Your Plexivo App Runner apps and Plexivo Kubernetes workloads in the same project connect over the private network: choose Private · apps in this project on the Connect tab for that address, or connect the app to the database and it receives DATABASE_URL on its own. See Connect.

Connect from your computer#

The Plexivo CLI opens an encrypted tunnel to the database from your laptop, whatever its access setting. You still sign in to the database with its password. Each tunnel lasts up to an hour and is recorded in your organisation’s activity log.

bash

plexivo db connect orders-db

Private network for Enterprise#

Enterprise organisations can connect their own network to Plexivo over a private WireGuard VPN, with up to 25 devices or offices by default. Ask support to set it up for your organisation.

For enterprises Combine private databases, the private VPN and the CLI tunnel, whose sessions your organisation’s owners limit and can end at any time. Every tunnel is in the activity log.

Next steps#

ConnectConnection strings, TLS and limits. Install the Plexivo CLISign in and open a tunnel.

Updated 27 October 2026