DevFW-CICD/ingress-nginx-helm
16
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

use $the_real_ip for rate limit whitelist

Browse source
This commit is contained in:
Seth Pollack 2017-09-08 17:00:52 -04:00
parent 7b4d8cb1c3
commit 693a588175
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
controllers/nginx/rootfs/etc/nginx/template/nginx.tmpl
View file

@ -50,7 +50,7 @@ http {
{{ end }} {{ end }}
sendfile on; sendfile on;
aio threads; aio threads;
aio_write on; aio_write on;
@ -303,7 +303,7 @@ http {
{{ range $rl := (filterRateLimits $servers ) }} {{ range $rl := (filterRateLimits $servers ) }}
# Ratelimit {{ $rl.Name }} # Ratelimit {{ $rl.Name }}
geo $whitelist_{{ $rl.ID }} { geo $the_real_ip $whitelist_{{ $rl.ID }} {
default 0; default 0;
{{ range $ip := $rl.Whitelist }} {{ range $ip := $rl.Whitelist }}
{{ $ip }} 1;{{ end }} {{ $ip }} 1;{{ end }}