The IPBlocking policy in API Gateway helps you control requests from specific IP addresses or a range of IP addresses. You can either allow and/or deny requests from a device. The tenant administrator can define suite-level policy for non-provisioned/customer suites.
- Protecting API endpoints by allowing only authorized IP addresses to access sensitive data or perform operations.
- Helps in mitigating distributed denial-of-service (DDoS) attacks and reducing the attack surface by blocking traffic from malicious IPs.
IP Whitelisting is a security feature used to control access to web resources or services based on the IP addresses of incoming HTTP requests. Only requests originating from specific IP addresses included in the whitelist are allowed access to the server or application. Requests from IP addresses not listed in the whitelist are typically blocked.


IP Blacklisting is a security measure used to block access to web resources or services based on the IP addresses of incoming HTTP requests. Requests originating from specific IP addresses included in the blacklist are denied access to the server or application. Blacklisted IPs are typically blocked from accessing the protected resources, receiving error messages.


More options for defining the IP range.

Please note that there is a separate procedure for handling IP addresses for Infor-provisioned suites.