Allow incoming connections only from the CIS servers (IP whitelist) - Githubissues

OpenLiberty / openliberty.io

Open Liberty website

https://openliberty.io

Other

54 stars 40 forks source link

Allow incoming connections only from the CIS servers (IP whitelist) #1007

Open mbroz2 opened 5 years ago

mbroz2 commented 5 years ago

terminate any direct connections to the ol.io servers

kinueng commented 5 years ago

This is the IBM CIS documentation on whitelisting https://console.bluemix.net/docs/infrastructure/cis/whitelisted-ips.html

kinueng commented 5 years ago

Low cost solution is to whitelist IPs at the liberty server side using httpEndpoint https://www.ibm.com/support/knowledgecenter/en/SSAW57_liberty/com.ibm.websphere.liberty.autogen.nd.doc/ae/rwlp_config_httpEndpoint.html

addressIncludeList attribute