API Connect

API Connect

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#API Connect
#Applicationintegration
#APIConnect
 View Only
  • 1.  IP BAN Resolution

    Posted 13 days ago

    Hi everyone, i'm currently experiencing a situation were IP's on our load balancer keeps getting banned on the Developer's portal and we keep changing IP's. Anyone come across this and had this resolved?



    ------------------------------
    Christopher Adamudu
    ------------------------------


  • 2.  RE: IP BAN Resolution

    Posted 12 days ago

    Hi Christopher,

    I guess that, Drupal Perimeter Defence module automatically banning client IP addresses by using the flood control.

    You can manage the IP security in the Developer Portal as described in the below link. 

    https://www.ibm.com/docs/en/api-connect/software/10.0.1?topic=security-how-manage-ip-in-developer-portal#capic_portal_ip_security__client_ip

    Also, you can use the service-ip-allowlist commands to add, remove, and list the IP addresses on your Developer Portal. I hop below link would help you on this.

    https://www.ibm.com/docs/en/api-connect/software/10.0.x_cd?topic=commands-using-service-ip-allowlist



    ------------------------------
    Nirmalan
    ------------------------------



  • 3.  RE: IP BAN Resolution

    Posted 12 days ago

    You don't need to change IP address, just clear the ban in the portal using the portaladmin CLI/API.

    This is a sign you havent configured your load balancer correctly to forward on the client IP. The portal is trying to ban the client, but the only IP your load balancer has provided is the LB's own one, so thats what the portal will use.
    See this blog post for some guidance on configuring load balancers correctly: https://community.ibm.com/community/user/blogs/reece-oliver/2023/04/06/load-balancers-portal-security-modules

    You can always disable the perimeter module in the portal if you can't configure your load balancer correctly.



    ------------------------------
    Chris Dudley
    ------------------------------