Setting up IP restrictions

info

Estimated Time: 10 minutes

Overview

In KurocoEdge, it is possible to whitelist and blacklist IP addresses for the entire website or only for specific webpages.
In this tutorial, we will go through the steps on setting up IP restrictions on your website using KurocoEdge.

What You'll Learn

How to set up IP address blacklist and whitelist in KurocoEdge.

• IP address blacklist setup
• IP address whitelist setup

IP address blacklist setup

1. Select a draft deployment and add a rule by clicking the Add button.
   
   To keep it simple, we will leave the URL path pattern settings as default, which means the rule will be applied to the entire webpages of the selected backend.

   

   info

   Using the URL path pattern settings, you can set up rules that would only affect specific pages.

2. Click on rule's the Request tab, then click the Add Action button to create a new action. Expand the Condition / Variable tab and click the Add Field button.
   

3. In the Field settings selection, select the IP address field and add your own IP address.
   You can identify your IP address easily from the Edge settings page.
   

4. Now that the condition has been specified, we have to add an Execution action to specify what should happen when the condition is met. To do this, add a new field in the Execution tab.
   

5. In this blacklist setup, we want to redirect users to an "Unauthorized access" page, to do this, we will use the Synthetic response field.
   Select the 401 Unauthorized HTTP status and modify the HTML body to display the text that you would like to show.

6. Click the Update on the bottom left of the page to save your changes.

7. Verify the rule is working by clicking the Preview button on the top right of the page.

8. You should see the HTML body text displayed
   

IP address whitelist setup

The setup above specifies an IP address and redirects the user to a custom HTML page with the 401 Unauthorized HTTP status if they are accessing from the specified address.
In this section, we will use the Directive flag to reverse the condition and set up a IP address whitelist instead, to only allow the speicifed IP address to access the website.

By enabling the Invert conditions result, any access from IP addresses not specified in the IP address field in the Conditions / Variable tab will be redirected to the custom 401 unauthorized HTML page.

Summary

By following this tutorial, you've learned how to set up a basic blacklist/whitelist IP address access to your website using KurocoEdge and requires no source code changes required to your server.