knock2spot

README

knock2spot

What is this?

This project is a small website (written on Go), which can be used to seamesly whitelist your IP address on Azure resources. Currenty you can use it to:

1. Reveal your IP address
2. Whitelist your IP address on Azure Paas firewall (currently supports only Storage Account)
3. Whitelist your IP address on Network Security Group for specified destination port

How to use it?

You don't to compile this project, instead you can use the Docker image or build it yourself using the Dockerfile.

Easiest way how you can use this project is to deploy it to Azure App Service or Azure Container App. After deployment you'll need to assign managed identity to the app and grant permissions to the managed identity to the resources you want to whitelist your IP address on.

After App is deployed you can use it by navigating to the root of the website. You'll see 3 forms:

1. For NSG whitelisting. Requires NSG resource ID, destination port, rule priority and rule name.
2. For PaaS whitelisting. Requires resource's ID.
3. For IP address revealing.

How it works?

This project uses Azure SDK for Go to interact with Azure in a following way:

1. It tries in different way to get Azure token - from MSI endpoint, environment variables or logged Azure CLI session.

2. It parses requester IP address from request headers and tries to whitelist it on specified resources.

3. Using token and requester's IP address it tries to append IP address to specified NSG rule or PaaS firewall.