IP matcher

Note

This extension is intended to be robust against both untrusted downstream and upstream traffic.

Tip

This extension extends and can be used with the following extension category:

This input matcher matches IPv4 or IPv6 addresses against a list of CIDR ranges. It returns true if and only if the input IP belongs to at least one of these CIDR ranges. Internally, it uses a Level-Compressed trie, as described in the paper IP-address lookup using LC-tries by S. Nilsson and G. Karlsson. For “big” lists of IPs, this matcher is more efficient than multiple single IP matcher, that would have a linear cost.

cidr_ranges

(repeated , REQUIRED) Match if the IP belongs to any of these CIDR ranges.

stat_prefix