frain-dev / convoy

The Cloud Native Webhooks Gateway
https://getconvoy.io
Other
2.48k stars 142 forks source link

Add allow and block IP lists #2169

Closed jirevwe closed 1 month ago

jirevwe commented 1 month ago

This PR introduces a way to configure IP allow and block lists for outgoing webhooks without using a separate software (egress proxy, e.g., Smokescreen).

From a layered security perspective, this implementation:

Usage

It is currently put behind a feature flag, so usage will require the flag to be explicitly specified when running Convoy.

convoy agent --enable-feature-flag "ip-rules" --ip-allow-list "3.14.163.112/32,3.217.134.199/32"

It is also behind a business license. Hence, a license key must be explicitly specified when running Convoy.

convoy agent --enable-feature-flag --license-key "ABC-XYZ-123" "ip-rules" --ip-block-list "3.14.163.112/32,3.217.134.199/32"