API Gateway:Request block plugin

Block requests by URL

block_urls:
- swagger.html
- foo=bar
case_sensitive: false

Blocked requests:

curl http://example.com?foo=Bar
curl http://example.com/Swagger.html

Because case_sensitive is set to false, foo=Bar matches the foo=bar rule, and Swagger.html matches the swagger.html rule.

Block requests by header

block_headers:
- example-key
- example-value

Blocked requests:

curl http://example.com -H 'example-key: 123'
curl http://example.com -H 'my-header: example-value'

The first request matches because its header name contains example-key. The second request matches because its header value contains example-value.

Block requests by body

block_bodys:
- "hello world"
case_sensitive: false

Blocked requests:

curl http://example.com -d 'Hello World'
curl http://example.com -d 'hello world'

Both requests match because case_sensitive is set to false.

Apply rules to specific routes or domains

You can define separate blocking rules for different routes and domains. Rules are evaluated in order, and the first matching rule takes effect.

The following configuration applies to the route-a and route-b routes:

block_bodys:
- "hello world"

The following configuration applies to the *.example.com and test.com domains:

block_urls:
- "swagger.html"
block_bodys:
- "hello world"