Network Firewall & Access Control
An API-layer network firewall — IP allow/deny lists (CIDR + IPv6), proxy-aware client resolution that defeats X-Forwarded-For spoofing, per-IP rate limiting, GeoIP/ASN blocking, monitor mode, and custom deny responses — declared per route. No database required.