Country Blocking
Deny traffic from specific countries
Country blocking rejects requests from a configurable ISO country list before they hit the upstream. Blocks can be global or scoped to a single port.
Bypass list
Add usernames to Excluded Users to bypass country blocks — useful for internal monitoring or tech staff travelling through blocked regions.
Excluded users still follow URL replacements: they get each rule's default
destination, like a viewer with no country match, and skip ASN and country
entries and traffic routes. If you remap every viewer (for example from
1.1.1.1, default 2.2.2.2) and want excluded users to stay where they were,
turn on Keep the original host on the Excluded Users page: their
redirects then pass through untouched. This needs a gateway build with the
switch; the page says so when the selected server's gateway predates it.