Varnish 3 – Block ip addresses
To block ip addresses with Varnish edit the following file:
sudo nano /etc/varnish/default.vcl
And add the following. Of course replace the example ip addresses with the real ips you want to block.
acl forbidden {
"111.11.111.111";
"123.12.123.123";
"456.123.12.72";
}
sub vcl_recv {
# Block access from these ips
if (client.ip ~ forbidden) {
error 403 "Forbidden";
}
}
"111.11.111.111";
"123.12.123.123";
"456.123.12.72";
}
sub vcl_recv {
# Block access from these ips
if (client.ip ~ forbidden) {
error 403 "Forbidden";
}
}
After editing, execute:
sudo service varnish restart
Lol, found your blog again through Google!