Serve static content from Cloud Run to static ip

2 points · submitted Apr 2023 by u/NetFutility

I'm new to Google cloud but as I understand it I can serve my react content from Cloud Run. I want to filter traffic and only return the content if it's being requested from a specific ip I define. Is there a way to do that with just Cloud run and nginx or do I need a load balancer too?

3 comments · 100% upvoted · other discussions

comments

Read-only. Use the arrows to collapse threads.

martin_omander 3 points · Apr 2023 · :google: Googler

Cloud Run provides the client's IP address to your container. In Express, I use this code to get that IP address from an incoming HTTP request:

app.set('trust proxy', 2);
app.get('/', (req, res) => {
    // The client's IP address is in req.ip
})

I don't know what the equivalent would be in nginx. Maybe this is the right documentation?

permalink

aws2gcp 1 points · May 2023

I know Nginx can definitely be configured to log client IP via the x-forwarded-for header for scenarios where nginx is running behind an LB or reverse proxy, which is the case with Cloud Run. Just not sure if it supports performing behaviors based on that.

The LB solution would work, although it would also need to have a CloudArmor policy to do the ip whitelist.

TBD it might be easier to just implement this as the application layer.

permalink

martin_omander 1 points · May 2023 · :google: Googler

it might be easier to just implement this as the application layer

Yes, I didn't know if that was an option in your application. But I agree; that's an easy way to do it.

permalink