Skip to content

Commit

Permalink
apply feedback
Browse files Browse the repository at this point in the history
  • Loading branch information
lena-larionova committed May 13, 2022
1 parent 43eb18d commit c66214c
Show file tree
Hide file tree
Showing 3 changed files with 2 additions and 5 deletions.
3 changes: 1 addition & 2 deletions app/_hub/kong-inc/acl/_index.md
Original file line number Diff line number Diff line change
@@ -1,7 +1,6 @@
---
name: ACL
publisher: Kong Inc.
version: 3.0.x
desc: Control which Consumers can access Services
description: |
Restrict access to a Service or a Route by adding Consumers to allowed or
Expand Down Expand Up @@ -93,7 +92,7 @@ params:
Flag that if enabled (`true`), prevents the `X-Consumer-Groups` header to be sent in the request to the Upstream service.
---

{% if_plugin_version lte:2.0.x %}
{% if_plugin_version eq:2.0.x %}

The `whitelist` and `blacklist` models are mutually exclusive in their usage, as they provide complimentary approaches. That is, you cannot configure an ACL with both `whitelist` and `blacklist` configurations. An ACL with a `whitelist` provides a positive security model, in which the configured groups are allowed access to the resources, and all others are inherently rejected. By contrast, a `blacklist` configuration provides a negative security model, in which certain groups are explicitly denied access to the resource (and all others are inherently allowed).

Expand Down
1 change: 0 additions & 1 deletion app/_hub/kong-inc/bot-detection/_index.md
Original file line number Diff line number Diff line change
@@ -1,7 +1,6 @@
---
name: Bot Detection
publisher: Kong Inc.
version: 3.0.x
desc: Detect and block bots or custom clients
description: |
Protects a Service or a Route from most common bots and has the capability of allowing and denying custom clients.
Expand Down
3 changes: 1 addition & 2 deletions app/_hub/kong-inc/ip-restriction/_index.md
Original file line number Diff line number Diff line change
@@ -1,7 +1,6 @@
---
name: IP Restriction
publisher: Kong Inc.
version: 3.0.x
desc: Allow or deny IPs that can make requests to your Services
description: |
Restrict access to a Service or a Route by either allowing or denying IP addresses. Single IPs, multiple IPs, or ranges in [CIDR notation](https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing#CIDR_notation) like `10.10.10.0/24` can be used. The plugin supports IPv4 and IPv6 addresses.
Expand Down Expand Up @@ -138,7 +137,7 @@ $ curl -X POST http://kong:8001/services/{service}/plugins \
```
{% endif_plugin_version %}

{% if_plugin_version lte:2.0.x %}
{% if_plugin_version eq:2.0.x %}

Note that the `whitelist` and `blacklist` models are mutually exclusive in their usage, as they provide complimentary approaches. That is, you cannot configure the plugin with both `whitelist` and `blacklist` configurations. A `whitelist` provides a positive security model, in which the configured CIDR ranges are allowed access to the resource, and all others are inherently rejected. In contrast, a `blacklist` configuration provides a negative security model, in which certain CIDRS are explicitly denied access to the resource (and all others are inherently allowed).

Expand Down

0 comments on commit c66214c

Please sign in to comment.