Trust PUL

pulibrary · Mar 7, 2025 · 38016a4 · 38016a4
1 parent e7510cc
commit 38016a4
Show file tree

Hide file tree

Showing 2 changed files with 16 additions and 2 deletions.
diff --git a/nomad/traefik-wall/deploy/bot-plugin-production.tpl.yml b/nomad/traefik-wall/deploy/bot-plugin-production.tpl.yml
@@ -15,10 +15,17 @@ http:
           rateLimit: {{ env "rate_limit" }}
           ipv4subnetMask: {{ env "subnet_mask" }}
           protectParameters: "true"
-          # These are our load balancer IPs
           exemptIps:
+            # These are our load balancer IPs
             - 128.112.200.245/32
             - 128.112.201.34/32
+            # PUL Network, trust these.
+            - 128.112.0.0/16
+            - 140.180.0.0/16
+            - 204.153.48.0/23
+            - 66.180.176.0/24
+            - 66.180.177.0/24
+            - 66.180.180.0/22
           challengeTmpl: /challenge.tmpl.html
           # Exclude facet routes - they're an ajax request.
           excludeRoutes: "/catalog/facet,/catalog/range_limit"

diff --git a/nomad/traefik-wall/deploy/bot-plugin-staging.tpl.yml b/nomad/traefik-wall/deploy/bot-plugin-staging.tpl.yml
@@ -15,10 +15,17 @@ http:
           rateLimit: {{ env "rate_limit" }}
           ipv4subnetMask: {{ env "subnet_mask" }}
           protectParameters: "true"
-          # These are our load balancer IPs
           exemptIps:
+            # These are our load balancer IPs
             - 128.112.200.245/32
             - 128.112.201.34/32
+            # PUL Network, trust these.
+            - 128.112.0.0/16
+            - 140.180.0.0/16
+            - 204.153.48.0/23
+            - 66.180.176.0/24
+            - 66.180.177.0/24
+            - 66.180.180.0/22
           challengeTmpl: /challenge.tmpl.html
           # Exclude facet routes - they're an ajax request.
           excludeRoutes: "/catalog/facet,/catalog/range_limit"