Block IP’s at NGINX level with multiple domains on AWS ALB

Question

I have an AWS ALB and it is attached to multiple domain names. The ALB forwards the traffic to a EC2 machine with NGINX, here NGINX also has multiple domains associated with it.

I want to allow access to one of my domains from specific IP’s only. And all other domains should be accessible from 0.0.0.0/0.

Can this be done by modifying the configuration file for that domain only rather than modifying nginx.conf(such that the setting will be applicable to one domain alone)

P.S. The restrictions should be applicable only for a single domain.

Sounds like on the one or so server block(s) for that domain you have an `allow` and `deny` directives. — Shawn C., Jan 29 '19 at 16:54
I tried the same but was not able to figure out the settings for a single domain when there were ALB IP's in picture — Lijo Abraham, Jan 29 '19 at 18:28
You need to figure out the set real IP directive(s) so the allow/deny work — Shawn C., Jan 29 '19 at 18:29

score 0 · Accepted Answer · answered Jan 29 '19 at 18:31

Below mentioned lines in the configuration worked for me

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
real_ip_header X-Forwarded-For;
set_real_ip_from 10.0.0.0/16;
allow XX.XX.XX.XX/32;
allow XX.XX.XX.XX/32;
allow XX.XX.XX.XX/32;
allow 10.0.0.0/16;
deny all;

Here 10.0.0.0/16; is the IP CIDR of the VPC which allows access from the ALB.

Block IP’s at NGINX level with multiple domains on AWS ALB

1 Answers1