How to restrict unwanted IPs to access your site in Azure environment?

This is a very frequently asked question, not just in the Azure world!

There are two parts to it, as listed below:

1. Static IP Restriction - where you know the list of IPs that you would like to restrict.

Command script to enable static IPSecurity on Azure role:
@echo off
@echo
Installing "IPv4 Address and Domain Restrictions" feature

%windir%\System32\ServerManagerCmd.exe -install Web-IP-Security
@echo
Unlocking configuration for "IPv4 Address and Domain Restrictions" feature

%windir%\system32\inetsrv\AppCmd.exe unlock config
-section:system.webServer/security/ipSecurity

2. Dynamic IP Restriction - where you would be able to monitor the unwanted IPs actively and then apply the restriction

Ytterligare resurser