Security configuration parameter allowedAdminAccessIPs should support the provision of IP Ranges using CIDR notation. Currently, this is a comma separated list of individual values.
- Managing individual IP addresses is incredibly labour-intensive and leads often to mistakes, where the server can become unavailable for part or whole of an administrative body if errors have been made
- By using CIDR notation, the server no longer needs to go one-by-one through a list, and the resulting match time should be slightly faster.
- CIDR is how IP address ranges for internal and external networks are allocated, as such it is easier to provide and guarantee this at a network-infrastructure level.
- Providing this data in CIDR format would require less administration
