Open
Description
Currently the ALB has a manifest field http.allowed_source_ips but the NLB doesn't have this because we simply accept ingress from the VPC. With security groups for an NLB defined by #4767 beginning implementation in #5284, we will be able to directly accept public traffic through a security group attached to a network load balancer.
This means that we may want users to be able to specify CIDR blocks that they allow traffic to their NLB from. This would request a new manifest field nlb.allowed_source_ips which would have identical effect to that of http.allowed_source_ips.
Activity