GeoIP and geo rules

Goal

Allow or deny traffic based on geography / ASN.

Prerequisites

• MaxMind .mmdb files available to the Proxy (and documented Compose mount under deploy/docker/geoip/).
• Permission to manage geo rules in the console.

Steps

1. Place GeoLite2-Country.mmdb and optionally GeoLite2-ASN.mmdb where Proxy config expects them.
2. Restart Proxy if paths changed.
3. Open Security → Geo (geo rules).
4. Create allow/deny rules for countries or ASNs.
5. Publish.

Usability

• Missing databases fail open—rules will not enforce until DBs load.
• Combine geo deny with logging policies to measure impact before hard blocks.

Verify

• From a known country IP (or test harness), confirm allow/deny.
• Check Proxy logs for GeoIP load errors at startup.

Related

• Bot management
• Docker Compose