Traefik Ingress: Is blacklisting possible?

Question

Whitelisting ips is possible with this annotation: ingress.kubernetes.io/whitelist-source-range: "1.1.1.1/24"

Is it possible to do the same with blacklisting? would be nice to block some suspicous requests.

Answer 1

Unfortunately support for blocking ip addresses is not supported natively by traefik and any requests were declined with a comment:

We want to keep the IP filtering section as simple as possible and we think that your use case could be addressed differently.

We think that a blacklisting task can be better achieved using a firewall.

So, for now, and I insist on the "for now", we will decline your pull request.

For the same reason #7926 was declined.

You may be interested though in the those two plugins:

• https://pilot.traefik.io/plugins/276812076107694611/deny-ip-plugin
• https://pilot.traefik.io/plugins/280093067746214409/fail2-ban