nginx IP制限 under ELB

nginx.conf

# http://blog.techopsguru.com/2011/12/access-control-behind-amazon-elb-with-nginx.html

map $http_x_forwarded_for $allowed {
        default deny;
        ~*^23.24.25.26\s.*    allow;  # office external IP
        ~*^8.8.8.8\s.*        allow;  # internal.example.com
        ~*^9.0.2.1\s.*        allow;  # some user home IP
}

# restrict access to admin console (vhost part)
location /admin {
   if ( $allowed = "deny" ) {
      return 403 ;
   }

   try_files $uri @rails ;
}