leslie-tsang commented on issue #6566:
URL: https://github.com/apache/apisix/issues/6566#issuecomment-1067485079


   Hello there, APISIX allows CIDR `127.0.0.0/24` access the Admin API, defined 
by default in 
[`config-default.yaml`](https://github.com/apache/apisix/blob/530fb4d62c990ec23026f43f70b878e157d441bc/conf/config-default.yaml#L75).
   > APISIX will merge 
[`config.yaml`](https://github.com/apache/apisix/blob/530fb4d62c/conf/config.yaml)
 with 
[`config-default.yaml`](https://github.com/apache/apisix/blob/530fb4d62c/conf/config-default.yaml)
 to generate the final configuration.
   the configuration in 
[`config.yaml`](https://github.com/apache/apisix/blob/530fb4d62c/conf/config.yaml)
 will take effect rather than 
[`config-default.yaml`](https://github.com/apache/apisix/blob/530fb4d62c/conf/config-default.yaml)
 one
   
   -----
   If an empty IP list is defined in the configuration, APISIX will reject all 
traffic to Admin API.
   
   >   allow_admin:                  # 
http://nginx.org/en/docs/http/ngx_http_access_module.html#allow
       - 127.0.0.0/24              # If we don't set any IP list, then any IP 
access is allowed by default.
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to