# HttpProtectOptions.safeNetworks property · @imqueue/http-protect

Source: https://imqueue.org/api/http-protect/latest/http-protect.httpprotectoptions.safenetworks/
Published: 2026-08-01
Author: @imqueue maintainers (https://github.com/imqueue)
Package: @imqueue/http-protect 3.0.1 — generated reference, not hand-written

CIDR networks exempt from counting, limiting and banning.

**Signature:**

```typescript
safeNetworks?: string[];
```

## Default Value

`[]` — nothing is exempt

## Remarks

Matching addresses short-circuit [HttpProtect.verify()](https://imqueue.org/api/http-protect/latest/http-protect.httpprotect.verify/) before it touches Redis, so they are never counted and can never be banned — which also means an exempt address is answered `SAFE` even when Redis is unreachable. Use it for your own services, health checks and monitoring.

Every entry must carry a prefix length. `10.0.0.0/8` is a network and `203.0.113.7/32` is a single host, but a bare `203.0.113.7` is rejected — `@imqueue/net` throws while parsing it, so the [HttpProtect](https://imqueue.org/api/http-protect/latest/http-protect.httpprotect/) constructor throws too. Use `/32` for one IPv4 host and `/128` for one IPv6 host. The list is read once, in the constructor, into [HttpProtect.safeNetworks](https://imqueue.org/api/http-protect/latest/http-protect.httpprotect.safenetworks/); adding to it later needs a new instance.