選取您的 Cookie 偏好設定

我們使用提供自身網站和服務所需的基本 Cookie 和類似工具。我們使用效能 Cookie 收集匿名統計資料,以便了解客戶如何使用我們的網站並進行改進。基本 Cookie 無法停用,但可以按一下「自訂」或「拒絕」以拒絕效能 Cookie。

如果您同意,AWS 與經核准的第三方也會使用 Cookie 提供實用的網站功能、記住您的偏好設定,並顯示相關內容,包括相關廣告。若要接受或拒絕所有非必要 Cookie,請按一下「接受」或「拒絕」。若要進行更詳細的選擇,請按一下「自訂」。

Geographic IP filtering in Suricata compatible AWS Network Firewall rule groups

焦點模式
Geographic IP filtering in Suricata compatible AWS Network Firewall rule groups - AWS Network Firewall
此頁面尚未翻譯為您的語言。 請求翻譯

Use Geographic IP filtering to filter on country codes for the IP addresses of network traffic. You can use Geographic IP filtering with Suricata compatible rule strings and with the standard Network Firewall stateful rule groups.

Suricata supports filtering for source and destination IPs. You can filter on either of these types by itself, by specifying dst or src. You can filter on the two types together with AND or OR logic, by specifying both or any. For more information see the Suricata geoip keyword documentation at IP Keywords: geoip.

To use a Geographic IP filter, you provide the geoip keyword, the filter type, and the country codes for the countries that you want to filter for, for example geoip:dst,CN,US;. For additional examples, see Stateful rules examples: Geographic IP filter.

For more information about adding Geographic IP filtering to your Suricata compatible rule groups via the console, see the Creating a stateful rule group procedure.

IPv4 and IPv6 support

The Network Firewall implementation of Suricata geoip provides support for IPv6 and IPv4. This is an expansion of the support provided by Suricata.

MaxMind IP geolocation

Suricata determines the location of requests using MaxMind GeoIP databases. MaxMind reports very high accuracy of their data at the country level, although accuracy varies according to factors such as country and type of IP. For more information about MaxMind, see MaxMind IP Geolocation.

If you think any of the geographic IP data is incorrect, you can submit a correction request to Maxmind at MaxMind Correct GeoIP Data.

Country codes

IP geolocation uses the alpha-2 country codes from the International Organization for Standardization (ISO) 3166 standard.

Network Firewall only allows you to save Geographic IP filter rules that have valid country codes.

隱私權網站條款Cookie 偏好設定
© 2025, Amazon Web Services, Inc.或其附屬公司。保留所有權利。