Skip to content

feat: implement IP allowlisting for tunnels#24

Open
Davidthecode wants to merge 2 commits intooutray-tunnel:mainfrom
Davidthecode:feature/ip-allowlist
Open

feat: implement IP allowlisting for tunnels#24
Davidthecode wants to merge 2 commits intooutray-tunnel:mainfrom
Davidthecode:feature/ip-allowlist

Conversation

@Davidthecode
Copy link
Copy Markdown

IP allowlisting for tunnels

Adds support for restricting tunnel access to specific IP addresses and CIDR ranges via CLI flags and configuration files.

Features

  • New --ip flag: Specify allowed IPs/CIDRs (repeatable) in outray command.
  • Config support: Add ip_allowlist array to config.toml settings.

Protocol enforcement:

  • HTTP: Returns 403 Forbidden for blocked IPs.
  • TCP: Immediately closes connections from blocked IPs.
  • UDP: Silently drops packets from blocked IPs.

-- added IpGuard helper to centralize logic for IP normalization and validation.
-- Added unit tests for validation logic using vitest.

@vercel
Copy link
Copy Markdown

vercel bot commented Jan 13, 2026

@Davidthecode is attempting to deploy a commit to the Akinkunmi Team on Vercel.

A member of the Team first needs to authorize it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant