title: GCP Create Firewall Rule to Deny All Outside the U.S.?
body: <p>We see a lot of scans and attempts to hack our various external ingresses in GCP and the majority of these come from outside the U.S.  The neat thing is that we don't service anyone outside maybe 5 U.S. states and I'd like to know how to only allow ingress from IPs located inside the U.S. How can I create a firewall rule that does this in GCP is that even possible? Google searches asking this question yield nothing, not even anyone asking this question. Netflix and Hulu seem to have no problems doing this, can we do it too?</p>