# Geoblocking Access Control Based on Country
Geoblocking can be enabled to restrict content access based on user location/country.
Requests passing through the CDN are validated using IP geolocation. If the request originates from an unauthorized country, the system returns an HTTP 451 Unavailable For Legal Reasons status code.
# Enabling Geoblocking
- Log in to ByteArk Fleet (opens new window)
- Select your target service and navigate to the Geoblock tab
- Choose desired ACL Mode and click Save
Available ACL Mode options:
- Always allow from everywhere: No geographic restrictions
- Always allow from Thailand only: Restricts access to Thailand only
- Always block from everywhere: Blocks access from all countries
- Use dynamic ACL by schedules: Configure country-based access using time schedules
TIP
To restrict access to countries other than Thailand, select Use dynamic ACL by schedules and set up country rules with extended time periods in the schedule configuration.