Detect if IP is VPN, TOR or Proxy

[reallyagooduser]

I have this request where i need to identify if the IP making request to my loadbalancer or instance is flagged as a VPN , TOR or PROXY. Is there any solution inside GCP ? 

[444b]

Hey there

For TOR traffic you could potentially use a product like Google Cloud Armor Threat Intelligence which you can read more about here [1] and it does seem to allow TOR IPs

Alternatively and very theoretically, you could build a list of each of these types of request and create a custom metric inside of Monitoring and logging send an alert upon connections. Pairing this with a firewall will result in more control. (These are just my theories, I havent tested them)

[1]https://cloud.google.com/armor/docs/threat-intelligence

Hope the Cloud Armor Threat Intelligence is useful and something you can use