封装-如何允许来自特定IP的套接字连接/请求？

Question

I am not very familiar with Incapsula but I am currently working in a project that needs to send socket messages using simple socket php scripts on both ends (scripts work in localhost):

-Client: Outside Incapsula Sends messages to server

-Server: Apache Inside Incapsula (under Incapsula protection) Receives messages from client (a single client)

Supposing the IP from the client is: 198.168.123.123, how should I proceed to allow connections from this IP as if the server had no Incapsula protection for this IP?

Or is it impossible?

Thank you.

Answer 1

1. It's always recommended to restrict server access to Incapsula IPs: https://incapsula.zendesk.com/hc/en-us/articles/200627570-Restricting-direct-access-to-your-website-Incapsula-s-IP-addresses-

2. You can restrict the client's source IP inside your Incapsula account very easily: www.incapsula.com/demo/settings_3.html

3. If you want to restrict it in your code, you can use X-Forwarded-For and/or Incap-Client-IP headers: https://incapsula.zendesk.com/hc/en-us/articles/200627650-The-IPs-in-my-weblogs-have-changed

HTH, Ofer