Restrict Rest Service to specific IP range
Hi,
I want to Restrict Rest Service specific IP range.The below settings were tried in /prweb/web.xml but it's not working.
<filter>
<filter-name>RemoteAddrFilter</filter-name>
<filter-class>org.apache.catalina.filters.RemoteAddrFilter</filter-class>
<init-param>
<param-name>deny</param-name>
<param-value>10\.\d+\.\d+\.\d+|::1| Proprietary information hidden</param-value>
</init-param>
</filter>
<filter-mapping>
<filter-name>RemoteAddrFilter</filter-name>
<url-pattern>/prweb/PRRestService/<proprietary information>/V1/getResponse
</url-pattern>
</filter-mapping>
Pegasystems Inc.
US
Try an asterisk on the end of url-pattern. I think your pattern needs to start or end with one.
[Edit] try adding /*
A string beginning with a ‘/’ character and ending with a ‘/*’ suffix is used for path mapping
Pegasystems Inc.
US
In IP address, do you mean the actual end user client ip? Normally you rarely actually connect from browser to Pega nodes directly. Please read this link for detailed explanation - this should be done on the load balancer side if possible so that client ip outside the range will never be routed to pega nodes.
https://collaborate.pega.com/question/urgent-how-log-ip-address-user-trying-login-system-sso