Cloud service querying locally hosted API
-
Our business is leveraging cloud services more and more. Most of these providers use CDNs to reduce their load. We have servers in house that sit behind a pfSense firewall using Haproxy, Snort, and pfBlockerNG. Our website traffic is sent through a WAF and source limited, but the API from the cloud ERP vendors gets blocked with the WAF, so it must be sent directly to the firewall. In some cases where the cloud provider hosts a REST-based web service to provide their IP addresses, we have automated pfBlockerNG to query it every hour and update the alias. However, other vendors don't have that option. Currently, for those vendors we have whitelisted by ASN, but that is millions of IPs. We need a way to identify WAN traffic at the application layer and whitelist it. unfortunately