# HTTP Client SSRF Mitigation with InetAddressFilter in Spring Boot

DevFeed: [HTTP Client SSRF Mitigation with InetAddressFilter in Spring Boot](<https://devfeed.tech/articles/http-client-ssrf-mitigation-with-inetaddressfilter-in-spring-boot-4503.md>)

Original publisher: [Read original article](<https://www.baeldung.com/spring-boot-http-client-ssrf-mitigation-inetaddressfilter>)

Author: Hamid Reza Sharifi

Published: 2026-08-22T23:16:19Z

Content type: tutorial

Language: en

Sources: [Baeldung](<https://devfeed.tech/sources/baeldung.md>)

Topics: [Spring Boot 4](<https://devfeed.tech/topics/spring-boot-4.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Security](<https://devfeed.tech/topics/security.md>), [client](<https://devfeed.tech/topics/client.md>)

Tags: [how-to](<https://devfeed.tech/tags/how-to.md>), [http](<https://devfeed.tech/tags/http.md>), [security](<https://devfeed.tech/tags/security.md>), [spring](<https://devfeed.tech/tags/spring.md>), [spring-boot](<https://devfeed.tech/tags/spring-boot.md>), [spring-boot-4](<https://devfeed.tech/tags/spring-boot-4.md>), [spring-boot-spring-boot-4](<https://devfeed.tech/tags/spring-boot-spring-boot-4.md>), [tutorial](<https://devfeed.tech/tags/tutorial.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>)

## AI overview

A tutorial on mitigating Server-Side Request Forgery (SSRF) in Spring Boot applications with InetAddressFilter. It explains how filtering resolved IP addresses can prevent HTTP clients from reaching unintended internal, loopback, or cloud metadata destinations, and introduces built-in filters and composable allowlist and blocklist rules.

## Source excerpt

Learn how to use the InetAddressFilter class in a Spring-based application to limit the address that an HTTP client can call. The post HTTP Client SSRF Mitigation with InetAddressFilter in Spring Boot first appeared on Baeldung.