Value in only allowing access to backend from specifc IPs

Asked Jul 26 '16 at 15:39

Active Jul 26 '16 at 15:39

Viewed 52 times

I have a Load Balancer in front of several nginx web servers. I want to lock down my web servers as much as possible so I've added this to the http block in my nginx.conf:

allow {internal_ip_of_load_balancer};
deny all;

As I understand it, this will only allow requests from my Load Balancer to hit nginx. Is there much of a benefit from doing this?

asked Jul 26 '16 at 15:39

tptcat

Are the web servers publicly reachable? – gxx Jul 26 '16 at 15:50
Yes, @gf_. They are publicly reachable websites. – tptcat Jul 26 '16 at 15:53
Are you doing anything specific regarding the traffic at the load balancer? – gxx Jul 26 '16 at 16:05
some IP range blocking based on country. – tptcat Jul 26 '16 at 16:16
If your load balancer is only for given ports it works as a firewall, preventing direct access reduces vulnerability to some threats. – Tim Jul 26 '16 at 19:55

Value in only allowing access to backend from specifc IPs

0 Answers0