I just launched rack-allow-from, white listed host controls. Add hosts, like config.allow_from += ["1.2.3.4", "8.8.8.*", "example.com", "*.example.com"] to your application.rb. One caveat, using hostnames requires the client send the header X-Remote-Hostname (see the docs). Everyone else gets 403 unauthorized access… Tests and some docs to boot.