mirror of
https://github.com/go-gost/gost.git
synced 2026-10-08 12:05:46 +00:00
ginuerzh
3119cb43f2
Verify service-level admission control gating by client source IP, in both whitelist and blacklist modes. Contrasts a loopback client (curl inside the gost container) against an external client (curl inside the echo container) to exercise both admit and deny paths.
19 lines
496 B
YAML
19 lines
496 B
YAML
# HTTP proxy gated by a whitelist admission rule: only clients whose source
|
|
# address is 127.0.0.1 are admitted. A loopback client (curl inside the gost
|
|
# container) is admitted and reaches the echo server; an external client (a
|
|
# different container) is denied at accept time.
|
|
services:
|
|
- name: proxy
|
|
addr: ":8080"
|
|
admission: admission-0
|
|
handler:
|
|
type: http
|
|
listener:
|
|
type: tcp
|
|
|
|
admissions:
|
|
- name: admission-0
|
|
whitelist: true
|
|
matchers:
|
|
- 127.0.0.1
|