Limiting http request in Nginx

Question

Completly new Noob with it comes to Nginx configs. I'm trying to limit http requests based on IP: Here's what I have so far: I need to allow all GETs, however I need to limit PUT DELETE and POST to specific IP Ranges

location / {
            index app.php index.php index.html;
            try_files $uri @rewriteapp;
            limit_except GET {
                    allow all;
            }
            limit_except PUT DELETE POST {
                    allow <IP SUBNET 1>;
                    allow <IP SUBNET 2>;
                    deny all;
            }

Any idea what I'm getting wrong? Is it even possible?

Farhad Farahi · Accepted Answer · 2017-02-28 16:45:15Z

3

The following will reject every method except GET and HEAD. If the client is from specified ip ranges, it will have access to other methods.

location / {
            index app.php index.php index.html;
            try_files $uri @rewriteapp;

            limit_except GET {
                    allow <IP SUBNET 1>;
                    allow <IP SUBNET 2>;
                    deny all;
            }

answered Feb 28, 2017 at 16:45

Farhad Farahi

40.4k9 gold badges82 silver badges74 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

W.M. Over a year ago

How to redirected the disallowed methods to another proxy_pass?

Farhad Farahi Over a year ago

@W.M. You can redirect using if verb, if ($request_method = POST ) { return 301 https://example.com$request_uri; }

Big T Over a year ago

For clarity, as I've just had the same problem, this limits EVERYTHING BUT GET. i.e. <ip subnet 1> will be allowed on POST, PUT, etc, but nothing else will. Everything will be allowed GET requests.

Collectives™ on Stack Overflow

Limiting http request in Nginx

1 Answer 1

3 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

3 Comments

Your Answer

Sign up or log in

Post as a guest

Related