azure - 限制对暂存和开发插槽的访问

Question

我需要限制对我网站的暂存和开发位置的访问。因此，我在 web.config 中添加了此规则(如所述 here )

<rule name="Block unauthorized IP to staging/dev sites" stopProcessing="true">

    <match url=".*" />

    <conditions>
      <!-- Enter your staging site host name here as the pattern-->
      <add input="{HTTP_HOST}" pattern="myapp\-dev.azurewebsites.net"  />
      <add input="{HTTP_HOST}" pattern="myapp\-staging.azurewebsites.net" />

      <!-- Add the white listed IP addresses with a new condition as seen below -->
      <!-- <add input="{REMOTE_ADDR}" pattern="123\.123\.123\.2" negate="true"/> -->
    </conditions>

   <action type="Redirect" redirectType="Permanent" url="www.google.fr"/>
  </rule>

我需要限制访问

1. http://myapp-dev.azurewebsites.net
2. http://myapp-staging.azurewebsites.net

它仍然可以访问。所以我需要知道如何解决这个问题？

谢谢

Answer 1

默认情况是匹配所有条件，但您只需匹配一个条件，因为它是开发站点或登台站点。您需要添加逻辑分组=“MatchAny”，还需要将http://添加到www.google.fr。以下规则应该有效:

<rule name="Block unauthorized IP to staging/dev sites" stopProcessing="true">
      <match url=".*" />
      <conditions logicalGrouping="MatchAny">
        <add input="{HTTP_HOST}" pattern="myapp\-dev.azurewebsites.net" />
        <add input="{HTTP_HOST}" pattern="myapp\-staging.azurewebsites.net" />
        <!-- Enter your staging site host name here as the pattern-->
        <!-- Add the white listed IP addresses with a new condition as seen below -->
        <!-- <add input="{REMOTE_ADDR}" pattern="123\.123\.123\.2" negate="true"/> -->
      </conditions>

      <action type="Redirect" redirectType="Permanent" url="http://www.google.fr" />
</rule>