google compute engine - Nginx - Allow requests from IP range with no header set -



google compute engine - Nginx - Allow requests from IP range with no header set -

i'm trying utilize nginx behind compute engine http load balancer. allow health check requests come through port unauthorized , other requests authorized basic auth.

the health check requests come ip block: 130.211.0.0/22. if see requests coming ip block no x-forwarded-for header, health check load balancer.

i'm confused on how set nginx.

have tried using nginx header modules? googling around found these:

httpheadersmoremodule headers

there's similar question here.

alternative. in past worked software (rt), had thought of possibility in software itself, providing subdirectory unauthorized access (/noauth/). maybe software might have same, , configure gce health check point /noauth/mycheck.html.

please remember headers can forged, attacker knows vulnerability access server without auth.

nginx google-compute-engine

Comments

Popular posts from this blog

c - Compilation of a code: unkown type name string -

java - Bypassing "final local variable defined in an enclosing type" -

json - Hibernate and Jackson (java.lang.IllegalStateException: Cannot call sendError() after the response has been committed) -