Geo Blocking in google compute engine

[Maria Teresa]

Good day.

I have a question for the team Google Cloud Support.

¿ is possible block a range ips CIDR (countries) via console GCE (Networking / Network) ?

Thanks.

[Faizan (Google Cloud Support)]

Hello Maria,

By default all the incoming traffic to GCE instance is blocked. You need to create firewall rules to enable the traffic to the instance on specific ports. You have the option to create firewall rule to allow access from specific IP addresses, which can be done by adding those IPs as source IPs when creating the firewall rule. The information is documented on this link.

I hope that helps.

Thanks

Faizan

[John F. Arroyave Gutiérrez]

Hi there...  this is an old question but it doesnt have answered yet...

Is there any way to block traffic by country?  or allow traffic for a group of countries?

Thanks.

[Lucas (Cloud Platform Support)]

Hello,

There are possible ways to block traffic by country. 

Cloud Armor now supports location-based traffic filtering through its Web Application Firewall. You can set up geo-based access control by filtering on request.origin

I've also found these threads that ask the same questions that provide different answers. 

Hope this helps.

[1] https://stackoverflow.com/questions/23682114/google-app-engine-block-incoming-traffic-by-country
[2] https://serverfault.com/questions/22462/relatively-easy-way-to-block-all-traffic-from-a-specific-country
[3] https://stackoverflow.com/questions/29704635/allow-only-specific-countries-to-connect-to-vm
[4] https://stackoverflow.com/questions/26168240/google-cloud-block-incoming-connections
[5] https://stackoverflow.com/questions/35000410/block-offending-ip-from-google-compute-instance

[Aakash Gupta]

You could add a CDN ?? 

--
© 2018 Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043
 
Email preferences: You received this email because you signed up for the Google Compute Engine Discussion Google Group (gce-dis...@googlegroups.com) to participate in discussions with other members of the Google Compute Engine community and the Google Compute Engine Team.
---
You received this message because you are subscribed to the Google Groups "gce-discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to gce-discussio...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/gce-discussion/4add8c92-f9a2-4480-b816-484f5042872cn%40googlegroups.com.