Do you mean blocking all IPs except for those whitelisted? Obtaining the right whitelist seems to be time consuming task. If you control your servers and trust

Do you mean blocking all IPs except for those whitelisted? Obtaining the right whitelist seems to be time consuming task. If you control your servers and trust their software, why would you cripple its operation?