[FEATURE] Is there a way to deploy 2 services as reverse proxy where leaving a one without any protections and just bypassing everything

bunkerity / bunkerweb

🛡️ Open-source and next-generation Web Application Firewall (WAF)

https://www.bunkerweb.io

GNU Affero General Public License v3.0

6.28k stars 351 forks source link

[FEATURE] Is there a way to deploy 2 services as reverse proxy where leaving a one without any protections and just bypassing everything #1183

Closed sbe-arg closed 5 months ago

sbe-arg commented 5 months ago

What's needed and why?

I'm having a lot of problems with nextcloud talk to establish calls and need them working. Would be happy to whitelist nextcloud out of all the other controls for a bit.

Implementations ideas (optional)

No response

Code of Conduct

[X] I agree to follow this project's Code of Conduct

TheophileDiot commented 5 months ago

Hi @sbe-arg, yes it is possible with the whitelist IP, you just have to add the IP to the setting WHITELIST_IP and all traffic wont be checked by BunkerWeb. https://docs.bunkerweb.io/1.5.6/settings/#whitelist

sbe-arg commented 5 months ago

No I mean whitelist a service not an origin.

For example all traffic going to site1 to not do any checks and just passtrough

fl0ppy-d1sk commented 5 months ago

Hello @sbe-arg,

If you use multisite mode with MULTISITE=yes setting, you can apply WHITELIST_IP=0.0.0.0/0 only to a specific service by prefixing with the first server name of the service : www.example.com_WHITELIST_IP=0.0.0.0/0.

More info :

Multisite concept : https://docs.bunkerweb.io/latest/concepts/#multisite-mode
Example of prefixing : https://docs.bunkerweb.io/latest/quickstart-guide/#multiple-applications
Whitelisting : https://docs.bunkerweb.io/latest/security-tuning/#whitelisting

sbe-arg commented 5 months ago

Nice