How to integrate a large blacklist with AWS WAF

user_476648 0
Viewed 332

I'm following this example to filter incoming traffic from IP address ranges in a JSON file, using AWS WAF. The WAF file size-limit is 10,000 entries, and there is a max capacity of 500 WAF rules.

I would like to block a very large number of IP address ranges using AWS WAF - somewhere in the region of 500+ million. My initial thoughts are to store the entries in a database, and integrate the database with WAF. Is this possible, and if not, is there an alternative? There doesn't seem to be any recommended architecture for this in the AWS docs.

blacklist amazon-waf aws-lambda filtering amazon-web-services
1 Answers

AWS WAF can block specific CIDR range. Is all IP address in /32? If not, probably a lot easier to maintain this. Can probably use DynamoDB to maintain the list, then use lambda to fetch and update the IP set in WAF.

user_104306230
Related