Geo-Blocking could be done different ways:
-
Using blacklisting, this isn’t sustainable since the IP ranges by countries need to be updated often. I found a couple of pages that give you a full list of IPs from the different countries in CDIR format:
Search for all IP ranges of any country. and you can see the length of the APIs there -
Using a custom plugin that will do the blocking checking a database that would update regularly like maxmind.
-
Using a layer on top of Tyk like Cloudflare.
What do you think?