Is there any way of blocking access to a server via IP?

Question

I have an AKS setup with an NGINX load balancer and everything works perfectly, all the ingresses work and all the networking is flawless.

For security purposes I need to block access to the server via load balancer IP, is there a way to do so? I searched all over Google and the consensus seems to be that there just isn't a way to do so in K8S.

When the IP is accessed via HTTP, everything is fine and NGINX responds with a 404. But when the IP is accessed via HTTPS (even thought I explicitly disabled listening on port 443 in NGINX), I'm served a fake k8s certificate, which I belive is not served by NGINX, but by the K8S service (or am I wrong?)

Answer 1

you can use this loadBalancerSourceRanges:

for more information : https://learn.microsoft.com/en-us/azure/aks/load-balancer-standard#restrict-inbound-traffic-to-specific-ip-ranges

Answer 2

Try to disable all IP and whitelist your system or own ip which you are looking for to be access. As if you block one IP might it get hit through other IP.