How do you add a rule without restarting the app?

[alexsmartens]

Somewhat related to https://github.com/rack/rack-attack/issues/241.

A dynamically added rule is being ignored, steps to reproduce:

• lunch your app;
• lunch the console and add:

  Rack::Attack.blocklist('blocklist from localhost') do |req|
  # Requests are allowed if the return value is truthy
  '127.0.0.1' == req.ip || '::1' == req.ip
  end

• make a local request to the app -> the request goes through (the rule added above is ignored).

Additional info from the console:

> Rails.application.middleware.include? Rack::Attack
=> true

> Rack::Attack.blocklists
=>
{"blocklist from localhost"=>
  #<Rack::Attack::Blocklist:0x000000011327da80
   @block=#<Proc:0x000000011327d9e0 (irb):17>,
   @name="blocklist from localhost",
   @type=:blocklist>}

[alexsmartens]

Everything works:

• clearing out all rules

  Rack::Attack.clear_configuration

• dynamically adding a new rule

  Rack::Attack.blocklist('blocklist from localhost') do |req|
  '127.0.0.1' == req.ip || '::1' == req.ip
  end

My mistake was trying to add a rule in console. 🤦‍♂️ When modifying Rack::Attack rules in the console, these changes are not reflected in the running server because the console and server operate as separate processes with their own environments.