HAproxy

haproxy-network-allowed.cfg
frontend www
bind *:80
bind *:443 ssl crt /etc/some/cert.pem
#
# Route based on source ip
#
# acl network_allowed src 1.1.1.1 2.2.2.2
# tcp-request connection reject if !network_allowed
# acl block_1 src 192.167.0.0/16
# acl block_2 src 192.168.0.0/16
#
# use backend block_1_hosts if block_1
# use backend block_2_hosts if block_2
use_backend k8-cluster
backend k8-cluster
server node1 10.10.0.11:12345 check
server node2 10.10.0.12:12345 check
server node3 10.10.0.13:12345 check