bunny.net CDN is being blocked, partly

[andrewjs18]

hi there,

I'm using the bunny.net CDN. your nginx bad bot blocker was blocking access to my origin for some of the CDN edge servers, but not all of them.

I currently just whitelisted all of bunny.net's IPs in the whitelist-ips.conf, which took forever (like 300 IPs!)...is this the correct approach to it or is there an easier way to do it? should these IPs be whitelisted by default from your script?

here's their IP list:
https://api.bunny.net/system/edgeserverlist/plain
https://bunnycdn.com/api/system/edgeserverlist/Ipv6

[skhaz]

I am having the same issue.

[mitchellkrogza]

Whitelist all their IP's in whitelist-ips.conf

https://bunnycdn.com/api/system/edgeserverlist
https://bunnycdn.com/api/system/edgeserverlist/Ipv6

[mitchellkrogza]

hi there,

I'm using the bunny.net CDN. your nginx bad bot blocker was blocking access to my origin for some of the CDN edge servers, but not all of them.

I currently just whitelisted all of bunny.net's IPs in the whitelist-ips.conf, which took forever (like 300 IPs!)...is this the correct approach to it or is there an easier way to do it? should these IPs be whitelisted by default from your script?

here's their IP list: https://api.bunny.net/system/edgeserverlist/plain https://bunnycdn.com/api/system/edgeserverlist/Ipv6

I will try add them into a default whitelist but you can just add these to your whitelist-ips.conf file

[skhaz]

@mitchellkrogza this list of IPs needs to be get updated frequently on the blocker. Adding it once will break at any moment in the future

[mitchellkrogza]

@mitchellkrogza this list of IPs needs to be get updated frequently on the blocker. Adding it once will break at any moment in the future

that's why it should be added to your own whitelist-ips.conf which never gets touched by my updates

[andrewjs18]

hi there,
I'm using the bunny.net CDN. your nginx bad bot blocker was blocking access to my origin for some of the CDN edge servers, but not all of them.
I currently just whitelisted all of bunny.net's IPs in the whitelist-ips.conf, which took forever (like 300 IPs!)...is this the correct approach to it or is there an easier way to do it? should these IPs be whitelisted by default from your script?
here's their IP list: https://api.bunny.net/system/edgeserverlist/plain https://bunnycdn.com/api/system/edgeserverlist/Ipv6

I will try add them into a default whitelist but you can just add these to your whitelist-ips.conf file

adding them to your default whitelist would be ideal. they're a large CDN with many POPs now. perhaps a script of some sort to keep your list of IPs synced up with their list of IPs would be most efficient?

is there anything we can ask bunny.net to do to make a more efficient solution? currently the have 345 IPs (ipv4 alone) for their CDN POPs.

[mitchellkrogza]

I will have to look into a default whitelist of these and other important ranges that can be grown over time

[andrewjs18]

I will have to look into a default whitelist of these and other important ranges that can be grown over time

perfect, thank you.

I wonder if something could be coded where it sends an alert if a new IP is added to their IP list that would then get synced to your default whitelist.......or something along those lines.

[mitchellkrogza]

I will have to look into a default whitelist of these and other important ranges that can be grown over time

perfect, thank you.

I wonder if something could be coded where it sends an alert if a new IP is added to their IP list that would then get synced to your default whitelist.......or something along those lines.

Unfortunately we would need to keep tabs on their IP ranges. Any other important ranges you can think of as I already have Cloudflare