---
title: TLD Blocking
slug: tld-blocking
docTags: 
createdAt: 2026-01-14T12:29:30.682Z
---

:::hint{type="info"}
Navigate to the sidebar menu: [Protection](docId\:AOavaXBxIc2KMEjwXC3Pi)**  **> [Policies](docId\:i3Yd_tV8604vQf9JT7_CC), open a **Standard Policy**, and select the** TLD Blocking** tab in the top navigation bar.
:::

## Overview

**TLD (Top-Level Domain)** refers to the last segment of a domain name (e.g., the .com, .it, or .cn at the end of a web address). The **TLD Blocking** module allows you to block entire lists of websites based solely on their extension, regardless of where the server is physically hosted.

### Difference from GeoBlocking:

- **GeoBlocking** blocks traffic based on the **IP address location** (server location).
- **TLD Blocking** blocks traffic based on the **Domain Name itself**.
  - *Example:* If you block the .ru (Russia) TLD, you will block website.ru even if that website is hosted on a server in London.

## Interface Overview

The interface allows you to filter specific extensions through categorized lists.

- **Left Sidebar:** TLDs are grouped by their technical classification to help you find specific extensions.
- **Main Panel:** Displays the individual extensions available within the currently selected category.

## Understanding the Modules

Use this table to understand the different types of domains available for blocking.

| Category Group     | **Focus & Description**                                                                                                                                                                  |
| ------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Country TLDs**   | Extensions assigned to specific countries, such as** .it** (Italy),** .de** (Germany), **.cn** (China), or** .ru** (Russia).                                    |
| **Generic TLDs**   | The original, most common domain extensions used globally, including **.com**, **.net**, and** .org**.                                                                         |
| **New gTLDs**      | The newer wave of generic extensions used for specific sectors (e.g., **.top**, **.xyz**,** club**).                                                                                |
| **Arpa's TLDs**    | Technical domains used exclusively for internet-infrastructure purposes and reverse DNS lookups (e.g., **.arpa**).                                                                       |
| **Sponsored TLDs** | Extensions restricted to specific communities, agencies, or organizations (e.g., **.gov **for government, **.edu **for education, **.aero **for aviation). |

## Configuration & Logic

Configuring TLDs follows the standard blocking logic of the platform:

- **Toggle ON ():** The extension is **BLOCKED**. Any website ending with this suffix (e.g., example.xyz) will be inaccessible.
- **Toggle OFF ():** The extension is **ALLOWED**.
- **Enable All / Disable All:** Located at the bottom-right of the panel. Checking this box instantly blocks **every TLD** in the current list. Unchecking it disables the global block, allowing you to select individual extensions again.