HTTP triggers and custom domain names of Function Compute do not support IP address blacklists and whitelists. You need to use API Gateway or Web Application Firewall (WAF) for such purpose. If you do not want to use API Gateway or WAF, you can retrieve request headers in code of Function Compute and obtain IP addresses of clients from request headers. Then, incorporate custom logic to implement the functionality of IP blacklisting and whitelisting.
For more information, see Enable WAF protection, Protection rules, and IP address-based access control plug-in.
