NK microservice supports IP allow/block rule sets. Attach to site so source-IP hits either allow or block.
Rule set vs firewall
- IP rule_set: app-layer L7, fine-grained per site
- firewall-ip-rule: network L4 nftables, host-level global
Fields
- name / scope (user/system/global) / mode (allow/block)
- cidrs separated by newline/comma, IPv4 + IPv6
Attach to site
microservice-site/upsert: ip_rule_set_ids array. Multiple allows union, multiple blocks union.