TLD Blocking
Navigate to the sidebar menu: Protection > Policies, open a Standard Policy, and select the TLD Blocking tab in the top navigation bar.
Overview
TLD (Top-Level Domain) refers to the last segment of a domain name (e.g., the .com, .it, or .cn at the end of a web address). The TLD Blocking module allows you to block entire lists of websites based solely on their extension, regardless of where the server is physically hosted.
Difference from GeoBlocking:
- GeoBlocking blocks traffic based on the IP address location (server location).
- TLD Blocking blocks traffic based on the Domain Name itself.
- Example: If you block the .ru (Russia) TLD, you will block website.ru even if that website is hosted on a server in London.
Interface Overview
The interface allows you to filter specific extensions through categorized lists.
- Left Sidebar: TLDs are grouped by their technical classification to help you find specific extensions.
- Main Panel: Displays the individual extensions available within the currently selected category.
Understanding the Modules
Use this table to understand the different types of domains available for blocking.
Category Group | Focus & Description |
|---|---|
Country TLDs | Extensions assigned to specific countries, such as .it (Italy), .de (Germany), .cn (China), or .ru (Russia). |
Generic TLDs | The original, most common domain extensions used globally, including .com, .net, and .org. |
New gTLDs | The newer wave of generic extensions used for specific sectors (e.g., .top, .xyz, club). |
Arpa's TLDs | Technical domains used exclusively for internet-infrastructure purposes and reverse DNS lookups (e.g., .arpa). |
Sponsored TLDs | Extensions restricted to specific communities, agencies, or organizations (e.g., .gov for government, .edu for education, .aero for aviation). |
Configuration & Logic
Configuring TLDs follows the standard blocking logic of the platform:
- Toggle ON (Blue): The extension is BLOCKED. Any website ending with this suffix (e.g., example.xyz) will be inaccessible.
- Toggle OFF (Grey): The extension is ALLOWED.
- Enable All / Disable All: Located at the bottom-right of the panel. Checking this box instantly blocks every TLD in the current list. Unchecking it disables the global block, allowing you to select individual extensions again.
How to Allow Specific Domains
If you need to allow access to a specific domain belonging to a blocked Top-Level Domain (TLD), you can configure an exception in your DNS filtering policy without removing the restriction on the entire TLD.