Block traffic to VIP/LTM/GTM on the basis of origin

You can define topologies based on country of origin, though this is only going to be as good as the GeoIP database, and could be circumvented by the use of a proxy.

 

 

There is information on topologies in the admin guide. Click here

And wouldn't someone still be able to access the VIP by IP address (or another non-DNS method for resolving the FQDN to the virtual server IP address)?

 

 

I could be wrong, but I don't think there is a simple solution for doing this effectively on LTM as LTM doesn't have the ability to reference the GTM GeoIP database from an iRule. That might make a good feature request.

 

 

Aaron