request-block

Note

This example is copied from the extensions directory of the Higress main repository.

For more examples, please visit: https://github.com/alibaba/higress/tree/main/plugins/wasm-go/extensions

Function Description

The request-block plugin implements HTTP request blocking based on features such as URL, request headers, etc. It can be used to protect certain site resources from being exposed to the outside.

Running Attributes

Plugin Execution Stage: Authentication Stage

Plugin Execution Priority: 320

Configuration Fields

Name	Data Type	Fill Requirement	Default Value	Description
block_urls	array of string	Optional, at least one of block_urls, block_headers, block_bodies must be filled	-	Configure strings for matching URLs that need to be blocked
block_headers	array of string	Optional, at least one of block_urls, block_headers, block_bodies must be filled	-	Configure strings for matching request headers that need to be blocked
block_bodies	array of string	Optional, at least one of block_urls, block_headers, block_bodies must be filled	-	Configure strings for matching request bodies that need to be blocked
blocked_code	number	Optional	403	Configure the HTTP status code returned when a request is blocked
blocked_message	string	Optional	-	Configure the HTTP response body returned when a request is blocked
case_sensitive	bool	Optional	true	Configure whether matching is case-sensitive, default is case-sensitive

Configuration Example

Blocking Request URL Paths

block_urls:
- swagger.html
- foo=bar
case_sensitive: false

Based on this configuration, the following requests will be denied access:

curl http://example.com?foo=Bar
curl http://example.com/Swagger.html

Blocking Request Headers

block_headers:
- example-key
- example-value

Based on this configuration, the following requests will be denied access:

curl http://example.com -H 'example-key: 123'
curl http://example.com -H 'my-header: example-value'

Blocking Request Bodies

block_bodies:
- "hello world"
case_sensitive: false

Based on this configuration, the following requests will be denied access:

curl http://example.com -d 'Hello World'
curl http://example.com -d 'hello world'