Removing Internet Routable Addresses

By default, the Cado platform deploys into its own VPC with an allow-list of known good IP Addresses set by the user.

Public IPv4 addresses are assigned to the main Cado platform to enable a user to connect with their web browser, and are also assigned to workers to allow them to connect to required AWS services e.g. s3.amazonaws.com.

You can remove the requirement for publicly routable IP addresses if you have set up VPC Endpoints to connect Cado to required AWS Services.

You can remove the Public IP addresses associated with Workers under Settings > Advanced.

You can choose a deployment that does not include the Public Elastic IP address on the main Cado web server and set up an Application Load Balancer instead to handle traffic from the user to the platform.

Please see the AWS deployment overview for more information on how to deploy Cado in a private subnet.