如何确保.Net核心上的web api控制器仅供本地计算机使用

public void ConfigureServices(IServiceCollection services)
{
    services.AddControllers();

    services.Configure<MvcOptions>(options =>
    {
        options.Filters.Add(new RequireLocalAttribute());
    });
}

[AttributeUsage(AttributeTargets.Class | AttributeTargets.Method)]
public class RequireLocalAttribute : ActionFilterAttribute
{
    public override void OnActionExecuting(ActionExecutingContext context)
    {
        var remoteIpAddress = context.HttpContext.Connection.RemoteIpAddress;

        if (!IPAddress.IsLoopback(remoteIpAddress) && !remoteIpAddress.Equals(context.HttpContext.Connection.LocalIpAddress))
        {
            context.Result = new StatusCodeResult((int)HttpStatusCode.Forbidden);
            return;
        }

        base.OnActionExecuting(context);
    }
}