11 ms·
Default deny egress is an important step in limiting impact. It can be tough though.
by zomgwat 4y ago
Default deny egress is an important step in limiting impact. It can be tough though.
- mschuster91 4y agoThe biggest problem in "default deny egress" is CDNs. It's a colossal waste of time to set up firewall access lists for your build agents, but even for your production environments - as soon as you have one external API that is hosted behind Cloudflare, Anypoint, Cloudfront, Akamai or one of the hundred other similar services, you may as well give up. Simply because it's extremely annoying to keep up tabs with changing IP addresses.