Traffic filtering by IP prefix
In ipv4-allowlist
, ipv4-denylist
, ipv6-allowlist
and ipv6-denylist
allow filtering by entire IP prefixes instead of individual IP addresses.
Currently it's only possible to specify individual IP addresses for traffic filtering in YAML configuration which can be tedious with large number of IP addresses. Allowing to filter entire subnet by specifying IP prefix will make the configuration much easier and should also have positive effect on performance.
The result should look like this:
...
ipv4-allowlist:
- '192.168.1.0/24'
ipv6-denylist:
- '2001:db8:abcd:0012::0/96'
...