Home / server / Questions / 763790
In Process
Peteris
Asked: 2016-03-16 00:01:47 +0800 CST

Nginx TCP stream routing based on source IP

  • 772

I have configured nginx as a reverse proxy for a TCP (non-http) stream. I'd like to apply different routing for a particular source IP address - can this be done, and how? I'm aware of recomendations for the http module using the if directive, but that doesn't seem to work for these streams.

Existing configuration:

stream {
  server {
    listen 8000;
    proxy_pass staging;
  }
}

upstream staging {
    server 1.2.3.4:8000;
}

Desired configuration (not working):

stream {
  server {
    listen 8000;
    proxy_pass staging1;
    if ( $remote_addr ~* 4.5.6.7 ) {
        proxy_pass staging2;
    }
  }
}

upstream staging1 {
    server 1.2.3.4:8000;
}
upstream staging2 {
    server 1.2.3.44:8000;
}

This gives error '24314#24314: "if" directive is not allowed here', since it doesn't apply for the stream module - is there any other functionality how I could achieve a similar result?

nginx

1 Answers

  1. You can use a directive map for this behavior. Something like this (untested).

    upstream staging1 {
    server 1.2.3.4:8000;
}
upstream staging2 {
    server 1.2.3.44:8000;
}

map $remote_addr $upstream {
    4.5.6.7     staging2;
    default     staging1;
}

stream {
    server {
        listen 8000;
        proxy_pass $upstream;
    }
}
    • 1