[GH-ISSUE #518] GeoBlock per Resource #1485

New Issue

GiteaMirror · 2026-04-16T08:08:31-05:00

GiteaMirror commented

2026-04-16 08:08:31 -05:00

Originally created by @Sf298 on GitHub (Apr 12, 2025).
Original GitHub issue: https://github.com/fosrl/pangolin/issues/518

Issue Description

Hello! I am loving the GeoBlock plugin, however there are some Resources that I do want to expose to the global community. This does not seem to be currently possible

Ideal Solution

It would be amazing if, once the GeoBlock plugin is enabled, we could have a new option in the "Match Type" dropdown in the Resource > Rules section. The new option could be called 'Countries', and accept a comma separated list of country codes.

Implementation Suggestion

Looking at it's code, it seems easy to modify GeoBlock to add the ability to consider subdomains (by checking the URL parameter of the http.Request, in the allowDenyIPAddress functions).
I am quite keen on finding some kind of per Resource geo-blocking solution, so let me know if you need help with the plugin and I'll try to find the time.

Originally created by @Sf298 on GitHub (Apr 12, 2025). Original GitHub issue: https://github.com/fosrl/pangolin/issues/518 ## Issue Description Hello! I am loving the GeoBlock plugin, however there are some Resources that I do want to expose to the global community. This does not seem to be currently possible ## Ideal Solution It would be amazing if, once the GeoBlock plugin is enabled, we could have a new option in the "Match Type" dropdown in the Resource > Rules section. The new option could be called 'Countries', and accept a comma separated list of country codes. ## More Realistic Solution If it is difficult to update the UI to handle this, then we could use a custom version of the GeoBlock plugin (or create a PR to enhance GeoBlock), that lets you apply different filters based on subdomain. ## Implementation Suggestion Looking at it's code, it seems easy to modify GeoBlock to add the ability to consider subdomains (by checking the URL parameter of the http.Request, in the allowDenyIPAddress functions). I am quite keen on finding some kind of per Resource geo-blocking solution, so let me know if you need help with the plugin and I'll try to find the time.

GiteaMirror closed this issue

2026-04-16 08:08:32 -05:00

GiteaMirror commented

2026-04-16 08:08:33 -05:00

@hhftechnology commented on GitHub (Apr 14, 2025):

https://forum.hhf.technology/t/enhancing-your-pangolin-deployment-with-middleware-manager/

With this you can set it per resources any middlwares

https://github.com/hhftechnology/middleware-manager

@hhftechnology commented on GitHub (Apr 14, 2025): https://forum.hhf.technology/t/enhancing-your-pangolin-deployment-with-middleware-manager/ With this you can set it per resources any middlwares https://github.com/hhftechnology/middleware-manager

GiteaMirror commented

2026-04-16 08:08:34 -05:00

@mightyjens commented on GitHub (Apr 14, 2025):

This is so good, @hhftechnology !

My geoblocking-template:

traefik_config.yml

experimental:
  plugins:    
    geoblock:
      moduleName: github.com/PascalMinder/geoblock
      version: v0.3.2
    # ...

templates.yaml

 middlewares:
  # ...
  - id: "geoblock"
    name: "Geoblock"
    type: "plugin"
    config:
      geoblock:
        silentStartUp: false
        allowLocalRequests: false
        logLocalRequests: false
        logAllowedRequests: false
        logApiRequests: false
        api: "https://get.geojs.io/v1/ip/country/{ip}"
        apiTimeoutMs: 750
        cacheSize: 15
        forceMonthlyUpdate: false
        allowUnknownCountries: false
        unknownCountryApiResponse: "nil"
        blackListMode: false
        addCountryHeader: false
        countries:
          - DE

@mightyjens commented on GitHub (Apr 14, 2025): This is so good, @hhftechnology ! My geoblocking-template: traefik_config.yml ``` traefik_config.yml experimental: plugins: geoblock: moduleName: github.com/PascalMinder/geoblock version: v0.3.2 # ... ``` templates.yaml ``` templates.yaml middlewares: # ... - id: "geoblock" name: "Geoblock" type: "plugin" config: geoblock: silentStartUp: false allowLocalRequests: false logLocalRequests: false logAllowedRequests: false logApiRequests: false api: "https://get.geojs.io/v1/ip/country/{ip}" apiTimeoutMs: 750 cacheSize: 15 forceMonthlyUpdate: false allowUnknownCountries: false unknownCountryApiResponse: "nil" blackListMode: false addCountryHeader: false countries: - DE ```

GiteaMirror commented

2026-04-16 08:08:35 -05:00

@hhftechnology commented on GitHub (Apr 14, 2025):

glad it worked for you

@hhftechnology commented on GitHub (Apr 14, 2025): glad it worked for you

GiteaMirror commented

2026-04-16 08:08:35 -05:00

@hhftechnology commented on GitHub (Apr 17, 2025):

@miloschwartz please close this as well

@hhftechnology commented on GitHub (Apr 17, 2025): @miloschwartz please close this as well

GiteaMirror referenced this issue

2026-04-16 09:29:37 -05:00