Restrict Access to Remote API

[Merkle Germany GmbH]

Hi,

we want to restrict the access to the Remote API for a Subnet.
For access restriction we tried (nginx proxy) the following configuration, which "disabled" our Login from external ressources  (after entering user data an error occurs with login failed):

location / {
   proxy_pass http://internal.jira.server:8080;
   proxy_redirect off;
}

location /rest {
   allow 10.0.0.0/8;
   deny all;
   proxy_pass http://internal.jira.server:8080/rest/;
   proxy_redirect off;
}

The reason for this restriction is, that some customers do some regulary Remote API Calls which slows down our instance. We want to restrict this (but cannot completly disable the Remote API function).

Regards

Patrick

[Pedro Cora]

+1

[Merkle Germany GmbH]

Found this one - https://answers.atlassian.com/questions/121611/restricting-jira-rest-api-based-on-users-ip-address