Our preview and staging environments are restricted to GDS IPs (details of which are in the credentials repo).
Access to the Admin Frontend is also restricted on production to GDS and Crown Commercial Service IPs.
These IP restrictions are configured via the router app.
Blocking individual IPs¶
All of our traffic is handled through a PaaS CDN service which does not currently give us a way to block individual IP addresses (for e.g. crawlers that are hitting us too heavily).