You've got to be fucking kidding me, Google Cloud's Cloud Armor security policies won't do HTTP header based filtering on a GCS Cloud CDN bucket endpoint?
Discussion
Replies:
4
I guess that means I have to migrate back to local nginx serving that ... proxies out to GCS? Or at that point maybe just move the media back locally, but that sounds painful. Just so I can block scrapers. What a load of bullshit.
@tim In the past I've just used a trivial Cloud Run Go app for similar shenanigans, but I agree - three really ought to be a simpler way.
@thomrstrom the stupidest thing is that it's supported for non-GCS-bucket load balancers, and their "Media CDN" product, but not plain Cloud CDN backed by a GCS bucket. For no good reason.
@tim Having worked within Google Cloud for a handful of years, I'd argue that there is 0 reward for implementing consistency there.
