CODEWITHSUNDEEP
nginxwhitelist
Stepan
Stepan

Reputation: 1431

Allow any IPs to private_url but only allow whitelisted IPs to public_url in nginx

I have a Java Spring app on WebSphere behind nginx. I have
my_website.com/private_url
my_website.com/public_url
Currently both addresses are accessible from any IP. What is the correct way to tell nginx to only accept requests to my_website.com/private_url from list of whitelisted subnets?

Upvotes: 1

Views: 175

Answers (1)

Mehrdad
Mehrdad

Reputation: 583

To deny access to everybody except certain addresses to a specific directory or request add this location block

location ^~ /private_url {
  allow x.x.x.x/32;
  allow x.y.x.x/16; 
  deny all;
}

The rules are checked in sequence from top to bottom until the first match is found.

You should add this in nginx.conf, but you don't want editing this file every time you want to add new ip. So instead write all ip addresses in a whitelist.conf in nginx home directory and include this file in location block.

whitelist.conf

allow x.x.x.x/32;
allow x.y.x.x/16;

nginx.conf

location ^~ /private_url {
  include whitelist.conf; 
  deny all;
}

Upvotes: 1

Related Questions