Cannot restrict traffic, how to http-request deny allow !path || !path2 !networks

haproxy version: 2.2.7

I can restrict accessing to selected /path only, but how to also allow access to /somepath from specific network besides that?

Config example:

acl network_allowed src 1.2.3.4/10
acl allowed_pages path_beg /allow
acl allowed_page_for_ip path_beg /only-from-specific-ip

Works, only the allowed path is accessible:

http-request deny if !allowed_pages

This does not work, either of the paths is accessible:

http-request deny if !allowed_pages || !allowed_page_for_ip

This is what I need:

http-request deny if !allowed_pages || !allowed_page_for_ip !network_allowed

No, this does not work. How this should this be?

1 post - 1 participant

Read full topic