sendnrw/netbird-docs
2
0
Fork 0
mirror of https://github.com/netbirdio/docs.git synced 2026-08-25 01:01:27 +02:00
Code Issues Packages Projects Releases Wiki Activity

Note that reverse proxy access rules combine with AND by default (#863)

Browse Source 
Clarify in "Step 3b: Configure access control" that access restrictions
of different types (IP CIDR, country, CrowdSec) are combined with a
logical AND by default: a connection must satisfy all of them.

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
Bruno Mercier Costa
2026-07-21 09:42:01 +02:00
committed by GitHub
parent 43b53a2aa5
commit a6c4910479
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/pages/manage/reverse-proxy/index.mdx
View File

@@ -286,6 +286,8 @@ Switch to the **Access Control** tab to restrict access by IP address, country,
- Add **allowed countries** or **blocked countries** to restrict by geographic location.
- Set **CrowdSec IP Reputation** to **enforce** or **observe** to block or monitor known malicious IPs (when available on the proxy cluster).
By default, restrictions of different types are combined with a logical **AND**: a connection must satisfy all of them (for example, come from an allowed CIDR *and* an allowed country) to be allowed through.
Access restrictions are evaluated before authentication: if a connection is blocked by an access restriction rule, it is rejected before any authentication check.
<Note>