Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Limit IPs #166

Merged
merged 3 commits into from
Nov 26, 2023
Merged

Limit IPs #166

merged 3 commits into from
Nov 26, 2023

Conversation

umputun
Copy link
Owner

@umputun umputun commented Nov 26, 2023

Implements #119

This PR adds support for the "remote" configuration parameter to all the providers except the basic one (static). If set, it will restrict access to a given route for source IPs or networks. This is what it looks like with the file provider:

srv.example.com:
  - {route: "/something/restricted", dest: "http://127.0.0.2:8082/", "remote": "192.168.1.0/24, 124.0.0.1"}
  - {route: "^/api/svc2/(.*)", dest: "http://127.0.0.2:8080/blah2/$1/abc"} 

By default, the remote address from the request is used, however in some cases (proxy in front, docker with bridge network, etc) user may want to use X-Real-IP and X-Forwarded-For headers. This options is off by default, and to turn it on --remote-lookup-headers param or REMOTE_LOOKUP_HEADERS=1 env can be set. It should be used only in trusted environments where bad actors can't set/change those headers.

update realip deps

regroup deps, keep all indirect separately
@umputun umputun force-pushed the limit-ips branch 2 times, most recently from 7b08f15 to 6fdaabb Compare November 26, 2023 22:14
add new remote param to docker and file providers

lint: http nil body

add support of remote ips to consul provider

local implementation of onlyfrom middleware

lint: missing comment

make proxy tests more readable

preffer public IP if any forwwarded
add more info and fix typos

add info to readme
@umputun umputun merged commit 899b552 into master Nov 26, 2023
8 checks passed
@umputun umputun deleted the limit-ips branch November 26, 2023 22:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant