0

I have a Load Balancer in front of several nginx web servers. I want to lock down my web servers as much as possible so I've added this to the http block in my nginx.conf:

allow {internal_ip_of_load_balancer};
deny all;

As I understand it, this will only allow requests from my Load Balancer to hit nginx. Is there much of a benefit from doing this?

Improve this question
5
  • Are the web servers publicly reachable?
    – gxx
    Jul 26, 2016 at 15:50
  • Yes, @gf_. They are publicly reachable websites.
    – tptcat
    Jul 26, 2016 at 15:53
  • Are you doing anything specific regarding the traffic at the load balancer?
    – gxx
    Jul 26, 2016 at 16:05
  • some IP range blocking based on country.
    – tptcat
    Jul 26, 2016 at 16:16
  • If your load balancer is only for given ports it works as a firewall, preventing direct access reduces vulnerability to some threats.
    – Tim
    Jul 26, 2016 at 19:55

0

Reset to default

You must log in to answer this question.

Browse other questions tagged .