Layer 7 Blacklist and Whitelist Management

Layer 7 blacklist and whitelist pages allow you to manage IP-based access control for HTTP/HTTPS traffic on your ports.

Available Lists

Two types of lists are available for managing Layer 7 traffic:

Blacklist (Bans)

The Layer 7 blacklist allows you to block or restrict specific IP addresses from accessing your HTTP/HTTPS services. Banned IP addresses are handle with a Verification request. When a banned IP attempts to access your service, they will be presented with a verification challenge (such as a Proof of Work challenge or other automated verification). If the client successfully completes the verification challenge, the ban will be automatically removed, and the client can access your service normally. Bans automatically expire in a reasonable time.

This approach helps distinguish between legitimate clients (who may have been caught up in automated protection) and malicious actors (who typically cannot or will not complete verification).

Whitelist

The Layer 7 whitelist allows you to add temporary whitelists for specific IP addresses. All whitelist entries expire after a period of time. Whitelisted IPs may bypass certain validation steps and mitigation measures.

Regional Scope

Important: Layer 7 bans and whitelists are applied on a per-region basis.

When adding an entry to either list you must ban the client in the relevant region. By default all regions are selected.

Managing Entries

Viewing Entries

Each page displays a table of current entries showing:

  • Address: The IP address
  • Region: The region where the entry applies (with flag icon)
  • Reason: Why the entry was added (may include a request ID linking to HTTP logs)
  • Created At: When the entry was created
  • Expired At: When the entry will expire (or "Currently Active" if still active)
  • Status: Current status (Active/Expired)

Searching Entries

You can search for specific entries using:

  • IP Address: Find all entries for a specific IP
  • Request ID: Find entries associated with a specific HTTP request from your logs

Adding Entries

To add a new entry:

  1. Enter the IP address
  2. Select the regions where this entry should apply (all regions selected by default)
  3. Submit the form

Changes may take a few moments to propagate across the network.

Integration with Layer 7 Protection

Layer 7 bans and whitelists work alongside other Layer 7 protection features: