HAProxy: Source IP ACL?
-
I have a webserver that hosts my SuiteCRM installs.
I want to restrict access to those to a few hosts (my house, and my office).
I know that I should use an Alias, but what hosts would be a part of that Alias? Would it be my WAN IP? If so, how do deal with the fact that its dynamic? Would I have to go and update that alias everytime my ISP changed my IP address?
What do the HAProxy ACLs/rules look like? My best guess is ACL: url matches mycrm.com (named my_crm) and another ACL for: source IP matches Alias (allowed_inside)
Then, create an action: Use Backend - ACLs = my_crm allowed_inside.
I hope I am on the right track here?
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.