Is there a way to restrict the /admin landing page so it's only reachable from specific internal hosts (like a jump host), while the regular application landing page stays reachable from all client devices — given /admin runs on the same port as the main application, so it can't simply be split onto a separate restricted port the way the Middleware Console can?

All FAQ questions / Developer Studio, deployment, and upgrades

Answer

IP whitelisting at the network/ingress level (restricting traffic to /admin so it's only accepted from the jump host's or app server's own IP) is the supported approach here, since /admin can't be isolated onto its own port the way the Middleware/MWS Console can. IFS's own security documentation on exposing the application to the internet covers this kind of network-level access restriction and is the right starting point for setting it up correctly.

Documentation-based answer. Confirm the product and release before applying it. This answer has not been verified in an IFS environment.

← Browse Developer Studio, deployment, and upgrades questions