getsentry / sentry

Developer-first error tracking and performance monitoring
https://sentry.io
Other
39.04k stars 4.19k forks source link

[Feature Request] Add support to filter IP network prefixes/ranges #77906

Open iconoor opened 1 month ago

iconoor commented 1 month ago

Problem Statement

In Settings > Org > Project > Inbound Filters > Custom Filters, it is possible to filter events triggered by requests from a list of IP addresses.

However, it seems to only support individual IP addresses, not IP network prefixes/ranges such as 123.123.123.0/24.

Some SaaS-based tools such as vulnerability scanners operate from a wider IP network, and it would be good to be able to filter out events triggered by such tools (for example in your test/integration environment) without having to enter several hundred/thousand individual addresses.

Solution Brainstorm

Add filtering support for IP prefix/network ranges in CIDR format, while still allowing individual IP addresses:

8.8.8.0/16
9.9.9.9

Product Area

Ingestion and Filtering

getsantry[bot] commented 1 month ago

Assigning to @getsentry/support for routing ⏲️

getsantry[bot] commented 2 weeks ago

Routing to @getsentry/product-owners-ingestion-and-filtering for triage ⏲️