4 ms·

How far could you get with a scheme like "if router.country.is_shady and ip.is_western: route.deny()"

• alephnerd 2y ago
  This is commonly done via WAFs and SSE products, but other methods are needed as well.
  • kjhcvkek77 2y ago
    I think either you misunderstand me or I misunderstand you. Unless I'm mistaken a web application firewall is for a corporation to protect their intranet and not applicable for a core router.
    • alephnerd 2y ago
      At the router level you can do Geographic IP filtering, and for protecting your core router there will almost always be some firewalling (eg. pfSense) but it ain't foolproof. A WAF and any other Perimeter security product can be used to enforce geoblocking (and other sorts of filtering) from an inbound standpoint at L7 (and why they are increasingly being subsumed under the API Security/Gateway segment or the SSE segment if you want to merge L3/4 and L7 security capabilities) > I think either you misunderstand me or I misunderstand you Probably on my end.
      • immibis 2y ago
        This entire discussion is about the Internet itself, not companies that connect to it: how does the Internet know which direction to send traffic in? It's managed by a protocol called BGP. Other countries can say your addresses are present in that country, and steal your traffic.