K
Q

Filter input paths on nginx-ingress to protect backend

10/1/2020

I have a very simple config but didn't find a direct answer yet. So there is nginx-ingress and gunicorn service behind. I want to protect gunicorn backend from all the bots bruteforcing urls. So I want to redirect only few URLs like:

  • /
  • /one/*
  • /two/*
  • /three/*

What is the simplest ingress config to achieve this goal?

-- TPRLab
kubernetes
nginx-ingress

Similar Questions

Kubernetes restart multi-container pod if a container dies
Kubernetes wireguard flannel overlay network on VMs blocked by kubefirewall
Forbidden: user cannot get path "/" (not anonymous user)
Docker desktop kubernetes add node
How to setup an ETCD cluster in Kubernetes using DNS discovery (SRV)?

1 Answer

10/3/2020

You can try this config:

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: app
  labels:
    app.kubernetes.io/name: app
  annotations:
    nginx.ingress.kubernetes.io/use-regex: "true"
spec:
  rules:
    - host: app.domain.com
      http:
        paths:
        - path: /(one|two|three)/
          backend:
            serviceName: app
            servicePort: 5000
        - path: /(.+)
          backend:
            serviceName: app2
            servicePort: 5000
        - path: /
          backend:
            serviceName: app
            servicePort: 5000

In this example:

  • app - your application
  • app2 - application, that responding with 403 or other error
-- Vladimir Baranov
Source: StackOverflow