Is it possible to block completely some specific countries using WAF in aws, without having the load...











up vote
0
down vote

favorite












I have hosted Magento2 site on AWS with an EC2 Instance. I don't have used any Load Balancer.



But as per requiremnt, I want to block some countries visitors completely.



I tried using WAF and "Geographic Match Conditions", but during configuration it is asking to set the "AWS Resource" , which only have options for "Application load balancer" and "REST API". But I donot have any load balancer.



So is it possible to block some specific countries(completely) with help of WAF section in AWS, without having any load balancer?



Any help will be appreciated.
Thanks.










share|improve this question




























    up vote
    0
    down vote

    favorite












    I have hosted Magento2 site on AWS with an EC2 Instance. I don't have used any Load Balancer.



    But as per requiremnt, I want to block some countries visitors completely.



    I tried using WAF and "Geographic Match Conditions", but during configuration it is asking to set the "AWS Resource" , which only have options for "Application load balancer" and "REST API". But I donot have any load balancer.



    So is it possible to block some specific countries(completely) with help of WAF section in AWS, without having any load balancer?



    Any help will be appreciated.
    Thanks.










    share|improve this question


























      up vote
      0
      down vote

      favorite









      up vote
      0
      down vote

      favorite











      I have hosted Magento2 site on AWS with an EC2 Instance. I don't have used any Load Balancer.



      But as per requiremnt, I want to block some countries visitors completely.



      I tried using WAF and "Geographic Match Conditions", but during configuration it is asking to set the "AWS Resource" , which only have options for "Application load balancer" and "REST API". But I donot have any load balancer.



      So is it possible to block some specific countries(completely) with help of WAF section in AWS, without having any load balancer?



      Any help will be appreciated.
      Thanks.










      share|improve this question















      I have hosted Magento2 site on AWS with an EC2 Instance. I don't have used any Load Balancer.



      But as per requiremnt, I want to block some countries visitors completely.



      I tried using WAF and "Geographic Match Conditions", but during configuration it is asking to set the "AWS Resource" , which only have options for "Application load balancer" and "REST API". But I donot have any load balancer.



      So is it possible to block some specific countries(completely) with help of WAF section in AWS, without having any load balancer?



      Any help will be appreciated.
      Thanks.







      amazon-web-services server ubuntu-16.04 magento2 amazon-waf






      share|improve this question















      share|improve this question













      share|improve this question




      share|improve this question








      edited Nov 11 at 10:12

























      asked Nov 11 at 9:53









      Mukesh

      9819




      9819
























          1 Answer
          1






          active

          oldest

          votes

















          up vote
          0
          down vote













          You can leverage CloudFront and its geo restriction feature. https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/georestrictions.html



          If you want to be even more flexible on restriction rules to apply, integrate CloudFront and WAF.
          https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-awswaf.html



          WBR






          share|improve this answer





















          • Maksim Aniskov, Thankyou for your reply. will this block visitors completely accesing the website Or only cloufront resources will be blocked ?
            – Mukesh
            Nov 11 at 12:47












          • You would need to configure your entire site to use CloudFront, and then configure your server to only accept requests that came though CloudFront.
            – Michael - sqlbot
            Nov 11 at 19:25











          Your Answer






          StackExchange.ifUsing("editor", function () {
          StackExchange.using("externalEditor", function () {
          StackExchange.using("snippets", function () {
          StackExchange.snippets.init();
          });
          });
          }, "code-snippets");

          StackExchange.ready(function() {
          var channelOptions = {
          tags: "".split(" "),
          id: "1"
          };
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function() {
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled) {
          StackExchange.using("snippets", function() {
          createEditor();
          });
          }
          else {
          createEditor();
          }
          });

          function createEditor() {
          StackExchange.prepareEditor({
          heartbeatType: 'answer',
          convertImagesToLinks: true,
          noModals: true,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: 10,
          bindNavPrevention: true,
          postfix: "",
          imageUploader: {
          brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
          contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
          allowUrls: true
          },
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          });


          }
          });














          draft saved

          draft discarded


















          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53247555%2fis-it-possible-to-block-completely-some-specific-countries-using-waf-in-aws-wit%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown

























          1 Answer
          1






          active

          oldest

          votes








          1 Answer
          1






          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes








          up vote
          0
          down vote













          You can leverage CloudFront and its geo restriction feature. https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/georestrictions.html



          If you want to be even more flexible on restriction rules to apply, integrate CloudFront and WAF.
          https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-awswaf.html



          WBR






          share|improve this answer





















          • Maksim Aniskov, Thankyou for your reply. will this block visitors completely accesing the website Or only cloufront resources will be blocked ?
            – Mukesh
            Nov 11 at 12:47












          • You would need to configure your entire site to use CloudFront, and then configure your server to only accept requests that came though CloudFront.
            – Michael - sqlbot
            Nov 11 at 19:25















          up vote
          0
          down vote













          You can leverage CloudFront and its geo restriction feature. https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/georestrictions.html



          If you want to be even more flexible on restriction rules to apply, integrate CloudFront and WAF.
          https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-awswaf.html



          WBR






          share|improve this answer





















          • Maksim Aniskov, Thankyou for your reply. will this block visitors completely accesing the website Or only cloufront resources will be blocked ?
            – Mukesh
            Nov 11 at 12:47












          • You would need to configure your entire site to use CloudFront, and then configure your server to only accept requests that came though CloudFront.
            – Michael - sqlbot
            Nov 11 at 19:25













          up vote
          0
          down vote










          up vote
          0
          down vote









          You can leverage CloudFront and its geo restriction feature. https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/georestrictions.html



          If you want to be even more flexible on restriction rules to apply, integrate CloudFront and WAF.
          https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-awswaf.html



          WBR






          share|improve this answer












          You can leverage CloudFront and its geo restriction feature. https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/georestrictions.html



          If you want to be even more flexible on restriction rules to apply, integrate CloudFront and WAF.
          https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-awswaf.html



          WBR







          share|improve this answer












          share|improve this answer



          share|improve this answer










          answered Nov 11 at 11:53









          Maksim Aniskov

          1




          1












          • Maksim Aniskov, Thankyou for your reply. will this block visitors completely accesing the website Or only cloufront resources will be blocked ?
            – Mukesh
            Nov 11 at 12:47












          • You would need to configure your entire site to use CloudFront, and then configure your server to only accept requests that came though CloudFront.
            – Michael - sqlbot
            Nov 11 at 19:25


















          • Maksim Aniskov, Thankyou for your reply. will this block visitors completely accesing the website Or only cloufront resources will be blocked ?
            – Mukesh
            Nov 11 at 12:47












          • You would need to configure your entire site to use CloudFront, and then configure your server to only accept requests that came though CloudFront.
            – Michael - sqlbot
            Nov 11 at 19:25
















          Maksim Aniskov, Thankyou for your reply. will this block visitors completely accesing the website Or only cloufront resources will be blocked ?
          – Mukesh
          Nov 11 at 12:47






          Maksim Aniskov, Thankyou for your reply. will this block visitors completely accesing the website Or only cloufront resources will be blocked ?
          – Mukesh
          Nov 11 at 12:47














          You would need to configure your entire site to use CloudFront, and then configure your server to only accept requests that came though CloudFront.
          – Michael - sqlbot
          Nov 11 at 19:25




          You would need to configure your entire site to use CloudFront, and then configure your server to only accept requests that came though CloudFront.
          – Michael - sqlbot
          Nov 11 at 19:25


















          draft saved

          draft discarded




















































          Thanks for contributing an answer to Stack Overflow!


          • Please be sure to answer the question. Provide details and share your research!

          But avoid



          • Asking for help, clarification, or responding to other answers.

          • Making statements based on opinion; back them up with references or personal experience.


          To learn more, see our tips on writing great answers.





          Some of your past answers have not been well-received, and you're in danger of being blocked from answering.


          Please pay close attention to the following guidance:


          • Please be sure to answer the question. Provide details and share your research!

          But avoid



          • Asking for help, clarification, or responding to other answers.

          • Making statements based on opinion; back them up with references or personal experience.


          To learn more, see our tips on writing great answers.




          draft saved


          draft discarded














          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53247555%2fis-it-possible-to-block-completely-some-specific-countries-using-waf-in-aws-wit%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown





















































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown

































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown







          Popular posts from this blog

          Bressuire

          Vorschmack

          Quarantine