IP Blocking

[Dominique Blanc]

Hello everyone,

Are there any possibilities to have geo IP blocking or loading a Blacklist from a feed periodically into the API Gateway?
Ideally we would like to connect the API Gateway to a live feed from our cyber defense center, to blacklist scanners & bots.

Currently we are using the "IP Address Range" fragment for white-listing our services. However, it is getting more complicated with SaaS applications connection to us, since many of them have no defined IP range.

Looking forward to your input

Kind regards
Dominique

[Dominique Blanc]

Hi,

Any suggestions regarding this topic?

[Ozan Okan]

Dear Dominique,

there is no OOB solution for this,

but you can create a scheduled task to fetch latest information from live feed, parse and create a record in cache or in OTK Cache if it is clustered environment. 
You can separate allowed/blocked ips separated with , 
Later in your service you can fetch this information from cache and Split this record and execute something like this:

Run Assertions for Each Item
       => Restrict Access to IP Address Range

Regards