Search code examples
kubernetesblacklisttraefik-ingress

Traefik Ingress: Is blacklisting possible?

Whitelisting ips is possible with this annotation: ingress.kubernetes.io/whitelist-source-range: "1.1.1.1/24"

Is it possible to do the same with blacklisting? would be nice to block some suspicous requests.

Solution

  • Unfortunately support for blocking ip addresses is not supported natively by traefik and any requests were declined with a comment:

    We want to keep the IP filtering section as simple as possible and we think that your use case could be addressed differently.

    We think that a blacklisting task can be better achieved using a firewall.

    So, for now, and I insist on the "for now", we will decline your pull request.

    For the same reason #7926 was declined.

    You may be interested though in the those two plugins: