You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@trafficcontrol.apache.org by GitBox <gi...@apache.org> on 2018/05/04 17:12:33 UTC

[GitHub] PeterRyder closed pull request #1643: Anonymous IP TO Implementation

PeterRyder closed pull request #1643: Anonymous IP TO Implementation
URL: https://github.com/apache/incubator-trafficcontrol/pull/1643
 
 
   

This is a PR merged from a forked repository.
As GitHub hides the original diff on merge, it is displayed below for
the sake of provenance:

As this is a foreign pull request (from a fork), the diff is supplied
below (as it won't show otherwise due to GitHub magic):

diff --git a/docs/source/admin/quick_howto/anonymous_blocking.rst b/docs/source/admin/quick_howto/anonymous_blocking.rst
new file mode 100644
index 000000000..4ee0ad5bd
--- /dev/null
+++ b/docs/source/admin/quick_howto/anonymous_blocking.rst
@@ -0,0 +1,87 @@
+..
+..
+.. Licensed under the Apache License, Version 2.0 (the "License");
+.. you may not use this file except in compliance with the License.
+.. You may obtain a copy of the License at
+..
+..     http://www.apache.org/licenses/LICENSE-2.0
+..
+.. Unless required by applicable law or agreed to in writing, software
+.. distributed under the License is distributed on an "AS IS" BASIS,
+.. WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+.. See the License for the specific language governing permissions and
+.. limitations under the License.
+..
+
+.. _rl-anonymous_blocking-qht:
+
+**************************************
+Configure Anonymous Blocking
+**************************************
+
+.. Note:: Anonymous Blocking is only supported for HTTP delivery services.
+
+1)  Prepare the Anonymous Blocking configuration file
+
+Anonymous Blocking uses a configuration file in JSON format to define blocking rules for delivery services. The file needs to be put on an HTTP server accessible to Traffic Router. An example of the JSON is as follows::
+
+    {
+
+       "customer": "YourCompany",
+       "version": "1",
+       "date" : "2017-05-23 03:28:25",
+       "name": "Anonymous IP Blocking Policy",
+
+       "anonymousIp": { "blockAnonymousVPN": true,
+                        "blockHostingProvider": true, 
+                        "blockPublicProxy": true,
+                        "blockTorExitNode": true},
+                        
+       "ip4Whitelist": ["192.168.30.0/24", "10.0.2.0/24", "10.1.1.1/32"],
+       
+       "ip6Whitelist": ["2001:550:90a::/48", "::1/128"],
+       
+       "redirectUrl": "http://youvebeenblocked.com"
+    }
+
+* “anonymousIp” contains the types of IPs which can be checked against the Anonymous IP Database. There are 4 types of IPs which can be checked: VPNs, Hosting Providers, Public Proxies, and Tor Exit Nodes. Each type of IP can be enabled or disabled. If the value is true, IPs which match this type will be blocked when the feature is enabled in the delivery service. If the value is false, IPs which match this type will not be blocked. If an IP matches more than 1 type and any type is enabled, the IP will be blocked.
+
+* “redirectUrl” is the URL that will be returned to the blocked clients. Without a redirectUrl, the clients will receive an HTTP response code 403. With a redirectUrl, the clients will be redirected with an HTTP response code 302.
+
+* “ipWhiteList” is an optional element. It includes a list of CIDR (Classless Inter-Domain Routing) blocks indicating the IPv4 and IPv6 subnets that are allowed by the rule. If this list exists and the value is not empty, client IP will be matched against the CIDR list, and if there is any match, the request will be allowed. If there is no match in the white list, further anonymous blocking logic will continue.
+
+
+2)  Add Anonymous Blocking parameters on Traffic Ops
+
+The following three new parameters are required to be added into CRConfig.json:
+
+* "anonymousip.policy.configuration": the HTTP URL of the Anonymous Blocking configuration file. Traffic Router will fetch the file from this URL.
+* "anonymousip.polling.url": the HTTP URL of the Anonymous IP Database. Traffic Router will fetch the file from this URL.
+* "anonymousip.polling.interval": the interval that Traffic Router polls the Anonymous Blocking configuration file and Anonymous IP Database.
+
+.. image:: anonymous_blocking01.png
+  :scale: 100%
+  :align: center
+
+3)  Enable Anonmyous Blocking for a delivery service
+
+.. image:: anonymous_blocking02.png
+  :scale: 100%
+  :align: center
+
+4)  Make configuration effective
+
+Go to Tools->Snapshot CRConfig, perform “Diff CRConfig” and click "Write CRConfig".
+
+.. image:: regionalgeo03.png
+  :scale: 70%
+  :align: center
+
+5)  Traffic Router access log with Anonymous Blocking
+
+Anonymous Blocking extends the field of "rtype" and adds a new field "ANON_BLOCK" in Traffic Router access.log to help to monitor the working of this feature.
+
+If rtype=ANON_BLOCK then the client's IP was found in the Anonymous IP Database and was blocked.
+
+   
+
diff --git a/docs/source/admin/quick_howto/anonymous_blocking01.png b/docs/source/admin/quick_howto/anonymous_blocking01.png
new file mode 100644
index 000000000..bda89db11
Binary files /dev/null and b/docs/source/admin/quick_howto/anonymous_blocking01.png differ
diff --git a/docs/source/admin/quick_howto/anonymous_blocking02.png b/docs/source/admin/quick_howto/anonymous_blocking02.png
new file mode 100644
index 000000000..0b7404693
Binary files /dev/null and b/docs/source/admin/quick_howto/anonymous_blocking02.png differ
diff --git a/docs/source/admin/quick_howto/index.rst b/docs/source/admin/quick_howto/index.rst
index 96f098fd2..b52c64758 100644
--- a/docs/source/admin/quick_howto/index.rst
+++ b/docs/source/admin/quick_howto/index.rst
@@ -25,4 +25,5 @@ Traffic Control is a complicated system, and documenting it is not trivial. Some
   dnssec.rst
   federations.rst
   regionalgeo.rst
+  anonymous_blocking.rst
   steering.rst
diff --git a/docs/source/development/traffic_ops_api/v12/deliveryservice.rst b/docs/source/development/traffic_ops_api/v12/deliveryservice.rst
index 2884a4b58..67f436fc4 100644
--- a/docs/source/development/traffic_ops_api/v12/deliveryservice.rst
+++ b/docs/source/development/traffic_ops_api/v12/deliveryservice.rst
@@ -51,149 +51,149 @@ Delivery Service
 
   **Response Properties**
 
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  |        Parameter         |  Type  |                                                             Description                                                              |
-  +==========================+========+======================================================================================================================================+
-  | ``active``               |  bool  | true if active, false if inactive.                                                                                                   |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``cacheurl``             | string | Cache URL rule to apply to this delivery service.                                                                                    |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``ccrDnsTtl``            |  int   | The TTL of the DNS response for A or AAAA queries requesting the IP address of the tr. host.                                         |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``cdnId``                |  int   | Id of the CDN to which the delivery service belongs to.                                                                              |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``cdnName``              | string | Name of the CDN to which the delivery service belongs to.                                                                            |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``checkPath``            | string | The path portion of the URL to check this deliveryservice for health.                                                                |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``displayName``          | string | The display name of the delivery service.                                                                                            |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``dnsBypassCname``       | string |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``dnsBypassIp``          | string | The IPv4 IP to use for bypass on a DNS deliveryservice  - bypass starts when serving more than the                                   |
-  |                          |        | globalMaxMbps traffic on this deliveryservice.                                                                                       |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``dnsBypassIp6``         | string | The IPv6 IP to use for bypass on a DNS deliveryservice - bypass starts when serving more than the                                    |
-  |                          |        | globalMaxMbps traffic on this deliveryservice.                                                                                       |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``dnsBypassTtl``         |  int   | The TTL of the DNS bypass response.                                                                                                  |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``dscp``                 |  int   | The Differentiated Services Code Point (DSCP) with which to mark downstream (EDGE ->  customer) traffic.                             |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``edgeHeaderRewrite``    | string | The EDGE header rewrite actions to perform.                                                                                          |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``exampleURLs``          | array  | Entry points into the CDN for this deliveryservice.                                                                                  |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``geoLimitRedirectUrl``  | string |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``geoLimit``             |  int   | - 0: None - no limitations                                                                                                           |
-  |                          |        | - 1: Only route on CZF file hit                                                                                                      |
-  |                          |        | - 2: Only route on CZF hit or when from USA                                                                                          |
-  |                          |        |                                                                                                                                      |
-  |                          |        | Note that this does not prevent access to content or makes content secure; it just prevents                                          |
-  |                          |        | routing to the content by Traffic Router.                                                                                            |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``geoLimitCountries``    | string |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``geoProvider``          |  int   |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``globalMaxMbps``        |  int   | The maximum global bandwidth allowed on this deliveryservice. If exceeded, the traffic routes to the                                 |
-  |                          |        | dnsByPassIp* for DNS deliveryservices and to the httpBypassFqdn for HTTP deliveryservices.                                           |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``globalMaxTps``         |  int   | The maximum global transactions per second allowed on this deliveryservice. When this is exceeded                                    |
-  |                          |        | traffic will be sent to the dnsByPassIp* for DNS deliveryservices and to the httpBypassFqdn for                                      |
-  |                          |        | HTTP deliveryservices                                                                                                                |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``httpBypassFqdn``       | string | The HTTP destination to use for bypass on an HTTP deliveryservice - bypass starts when serving more than the                         |
-  |                          |        | globalMaxMbps traffic on this deliveryservice.                                                                                       |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``id``                   |  int   | The deliveryservice id (database row number).                                                                                        |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``infoUrl``              | string | Use this to add a URL that points to more information about that deliveryservice.                                                    |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``initialDispersion``    |  int   |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``ipv6RoutingEnabled``   |  bool  | false: send IPv4 address of Traffic Router to client on HTTP type del.                                                               |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``lastUpdated``          | string |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``logsEnabled``          |  bool  |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``longDesc``             | string | Description field.                                                                                                                   |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``longDesc1``            | string | Description field 1.                                                                                                                 |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``longDesc2``            | string | Description field 2.                                                                                                                 |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``maxDnsAnswers``        |  int   | The maximum number of IPs to put in a A/AAAA response for a DNS deliveryservice (0 means all                                         |
-  |                          |        | available).                                                                                                                          |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``midHeaderRewrite``     | string | The MID header rewrite actions to perform.                                                                                           |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``missLat``              | float  | The latitude as decimal degrees to use when the client cannot be found in the CZF or the Geo lookup.                                 |
-  |                          |        |                                                                                                                                      |
-  |                          |        | - e.g. 39.7391500 or null                                                                                                            |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``missLong``             | float  | The longitude as decimal degrees to use when the client cannot be found in the CZF or the Geo lookup.                                |
-  |                          |        |                                                                                                                                      |
-  |                          |        | - e.g. -104.9847000 or null                                                                                                          |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``multiSiteOrigin``      |  bool  | Is the Multi Site Origin feature enabled for this delivery service (0=false, 1=true). See :ref:`rl-multi-site-origin`                |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``orgServerFqdn``        | string | The origin server base URL (FQDN when used in this instance, includes the                                                            |
-  |                          |        | protocol (http:// or https://) for use in retrieving content from the origin server.                                                 |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``originShield``         | string |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``profileDescription``   | string | The description of the Traffic Router Profile with which this deliveryservice is associated.                                         |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``profileId``            |  int   | The id of the Traffic Router Profile with which this deliveryservice is associated.                                                  |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``profileName``          | string | The name of the Traffic Router Profile with which this deliveryservice is associated.                                                |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``protocol``             |  int   | - 0: serve with http:// at EDGE                                                                                                      |
-  |                          |        | - 1: serve with https:// at EDGE                                                                                                     |
-  |                          |        | - 2: serve with both http:// and https:// at EDGE                                                                                    |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``qstringIgnore``        |  int   | - 0: no special query string handling; it is for use in the cache-key and pass up to origin.                                         |
-  |                          |        | - 1: ignore query string in cache-key, but pass it up to parent and or origin.                                                       |
-  |                          |        | - 2: drop query string at edge, and do not use it in the cache-key.                                                                  |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``rangeRequestHandling`` |  int   | How to treat range requests:                                                                                                         |
-  |                          |        |                                                                                                                                      |
-  |                          |        | - 0 Do not cache (ranges requested from files taht are already cached due to a non range request will be a HIT)                      |
-  |                          |        | - 1 Use the `background_fetch <https://docs.trafficserver.apache.org/en/latest/reference/plugins/background_fetch.en.html>`_ plugin. |
-  |                          |        | - 2 Use the cache_range_requests plugin.                                                                                             |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``regexRemap``           | string | Regex Remap rule to apply to this delivery service at the Edge tier.                                                                 |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``regionalGeoBlocking``  |  bool  | Regex Remap rule to apply to this delivery service at the Edge tier.                                                                 |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``remapText``            | string | Additional raw remap line text.                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``routingName``          | string | The routing name of this deliveryservice, e.g. <routingName>.<xmlId>.cdn.com.                                                        |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``signed``               |  bool  | - false: token based auth (see :ref:token-based-auth) is not enabled for this deliveryservice.                                       |
-  |                          |        | - true: token based auth is enabled for this deliveryservice.                                                                        |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``signingAlgorithm``     | string | - null: token based auth (see :ref:token-based-auth) is not enabled for this deliveryservice.                                        |
-  |                          |        | - "url_sig": URL Sign token based auth is enabled for this deliveryservice.                                                          |
-  |                          |        | - "uri_signing": URI Signing token based auth is enabled for this deliveryservice.                                                   |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``sslKeyVersion``        |  int   |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``tenant``               | string | Owning tenant name                                                                                                                   |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``tenantId``             | int    | Owning tenant ID                                                                                                                     |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``trRequestHeaders``     | string |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``trResponseHeaders``    | string |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``typeId``               |  int   | The type of this deliveryservice (one of :ref:to-api-v11-types use_in_table='deliveryservice').                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``xmlId``                | string | Unique string that describes this deliveryservice.                                                                                   |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | Parameter                    | Type   | Description                                                                                                                          |
+  +==============================+========+======================================================================================================================================+
+  | ``active``                   | bool   | true if active, false if inactive.                                                                                                   |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``anonymousBlockingEnabled`` | bool   | - true: enable blocking clients with anonymous ips                                                                                   |
+  |                              |        | - false: disabled                                                                                                                    |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``cacheurl``                 | string | Cache URL rule to apply to this delivery service.                                                                                    |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``ccrDnsTtl``                | int    | The TTL of the DNS response for A or AAAA queries requesting the IP address of the tr. host.                                         |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``cdnId``                    | int    | Id of the CDN to which the delivery service belongs to.                                                                              |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``cdnName``                  | string | Name of the CDN to which the delivery service belongs to.                                                                            |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``checkPath``                | string | The path portion of the URL to check this deliveryservice for health.                                                                |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``displayName``              | string | The display name of the delivery service.                                                                                            |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``dnsBypassCname``           | string |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``dnsBypassIp``              | string | The IPv4 IP to use for bypass on a DNS deliveryservice  - bypass starts when serving more than the                                   |
+  |                              |        | globalMaxMbps traffic on this deliveryservice.                                                                                       |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``dnsBypassIp6``             | string | The IPv6 IP to use for bypass on a DNS deliveryservice - bypass starts when serving more than the                                    |
+  |                              |        | globalMaxMbps traffic on this deliveryservice.                                                                                       |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``dnsBypassTtl``             | int    | The TTL of the DNS bypass response.                                                                                                  |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``dscp``                     | int    | The Differentiated Services Code Point (DSCP) with which to mark downstream (EDGE ->  customer) traffic.                             |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``edgeHeaderRewrite``        | string | The EDGE header rewrite actions to perform.                                                                                          |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``exampleURLs``              | array  | Entry points into the CDN for this deliveryservice.                                                                                  |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``geoLimitRedirectUrl``      | string |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``geoLimit``                 | int    | - 0: None - no limitations                                                                                                           |
+  |                              |        | - 1: Only route on CZF file hit                                                                                                      |
+  |                              |        | - 2: Only route on CZF hit or when from USA                                                                                          |
+  |                              |        |                                                                                                                                      |
+  |                              |        | Note that this does not prevent access to content or makes content secure; it just prevents                                          |
+  |                              |        | routing to the content by Traffic Router.                                                                                            |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``geoLimitCountries``        | string |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``geoProvider``              | int    |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``globalMaxMbps``            | int    | The maximum global bandwidth allowed on this deliveryservice. If exceeded, the traffic routes to the                                 |
+  |                              |        | dnsByPassIp* for DNS deliveryservices and to the httpBypassFqdn for HTTP deliveryservices.                                           |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``globalMaxTps``             | int    | The maximum global transactions per second allowed on this deliveryservice. When this is exceeded                                    |
+  |                              |        | traffic will be sent to the dnsByPassIp* for DNS deliveryservices and to the httpBypassFqdn for                                      |
+  |                              |        | HTTP deliveryservices                                                                                                                |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``httpBypassFqdn``           | string | The HTTP destination to use for bypass on an HTTP deliveryservice - bypass starts when serving more than the                         |
+  |                              |        | globalMaxMbps traffic on this deliveryservice.                                                                                       |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``id``                       | int    | The deliveryservice id (database row number).                                                                                        |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``infoUrl``                  | string | Use this to add a URL that points to more information about that deliveryservice.                                                    |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``initialDispersion``        | int    |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``ipv6RoutingEnabled``       | bool   | false: send IPv4 address of Traffic Router to client on HTTP type del.                                                               |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``lastUpdated``              | string |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``logsEnabled``              | bool   |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``longDesc``                 | string | Description field.                                                                                                                   |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``longDesc1``                | string | Description field 1.                                                                                                                 |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``longDesc2``                | string | Description field 2.                                                                                                                 |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``maxDnsAnswers``            | int    | The maximum number of IPs to put in a A/AAAA response for a DNS deliveryservice (0 means all                                         |
+  |                              |        | available).                                                                                                                          |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``midHeaderRewrite``         | string | The MID header rewrite actions to perform.                                                                                           |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``missLat``                  | float  | The latitude as decimal degrees to use when the client cannot be found in the CZF or the Geo lookup.                                 |
+  |                              |        | - e.g. 39.7391500 or null                                                                                                            |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``missLong``                 | float  | The longitude as decimal degrees to use when the client cannot be found in the CZF or the Geo lookup.                                |
+  |                              |        | - e.g. -104.9847000 or null                                                                                                          |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``multiSiteOrigin``          | bool   | Is the Multi Site Origin feature enabled for this delivery service (0=false, 1=true). See :ref:`rl-multi-site-origin`                |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``orgServerFqdn``            | string | The origin server base URL (FQDN when used in this instance, includes the                                                            |
+  |                              |        | protocol (http:// or https://) for use in retrieving content from the origin server.                                                 |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``originShield``             | string |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``profileDescription``       | string | The description of the Traffic Router Profile with which this deliveryservice is associated.                                         |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``profileId``                | int    | The id of the Traffic Router Profile with which this deliveryservice is associated.                                                  |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``profileName``              | string | The name of the Traffic Router Profile with which this deliveryservice is associated.                                                |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``protocol``                 | int    | - 0: serve with http:// at EDGE                                                                                                      |
+  |                              |        | - 1: serve with https:// at EDGE                                                                                                     |
+  |                              |        | - 2: serve with both http:// and https:// at EDGE                                                                                    |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``qstringIgnore``            | int    | - 0: no special query string handling; it is for use in the cache-key and pass up to origin.                                         |
+  |                              |        | - 1: ignore query string in cache-key, but pass it up to parent and or origin.                                                       |
+  |                              |        | - 2: drop query string at edge, and do not use it in the cache-key.                                                                  |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``rangeRequestHandling``     | int    | How to treat range requests:                                                                                                         |
+  |                              |        | - 0 Do not cache (ranges requested from files taht are already cached due to a non range request will be a HIT)                      |
+  |                              |        | - 1 Use the `background_fetch <https://docs.trafficserver.apache.org/en/latest/reference/plugins/background_fetch.en.html>`_ plugin. |
+  |                              |        | - 2 Use the cache_range_requests plugin.                                                                                             |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``regexRemap``               | string | Regex Remap rule to apply to this delivery service at the Edge tier.                                                                 |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``regionalGeoBlocking``      | bool   | Regex Remap rule to apply to this delivery service at the Edge tier.                                                                 |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``remapText``                | string | Additional raw remap line text.                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``routingName``              | string | The routing name of this deliveryservice, e.g. <routingName>.<xmlId>.cdn.com.                                                        |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``signed``                   | bool   | - false: token based auth (see :ref:token-based-auth) is not enabled for this deliveryservice.                                       |
+  |                              |        | - true: token based auth is enabled for this deliveryservice.                                                                        |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``signingAlgorithm``         | string | - null: token based auth (see :ref:token-based-auth) is not enabled for this deliveryservice.                                        |
+  |                              |        | - "url_sig": URL Sign token based auth is enabled for this deliveryservice.                                                          |
+  |                              |        | - "uri_signing": URI Signing token based auth is enabled for this deliveryservice.                                                   |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``sslKeyVersion``            | int    |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``tenant``                   | string | Owning tenant name                                                                                                                   |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``tenantId``                 | int    | Owning tenant ID                                                                                                                     |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``trRequestHeaders``         | string |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``trResponseHeaders``        | string |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``typeId``                   | int    | The type of this deliveryservice (one of :ref:to-api-v11-types use_in_table='deliveryservice').                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``xmlId``                    | string | Unique string that describes this deliveryservice.                                                                                   |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
 
   **Response Example** ::
 
@@ -201,6 +201,7 @@ Delivery Service
       "response": [
         {
             "active": true,
+            "anonymousBlockingEnabled": false,
             "cacheurl": null,
             "ccrDnsTtl": "3600",
             "cdnId": "2",
@@ -286,157 +287,157 @@ Delivery Service
 
   **Response Properties**
 
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  |        Parameter         |  Type  |                                                             Description                                                              |
-  +==========================+========+======================================================================================================================================+
-  | ``active``               |  bool  | true if active, false if inactive.                                                                                                   |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``cacheurl``             | string | Cache URL rule to apply to this delivery service.                                                                                    |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``ccrDnsTtl``            |  int   | The TTL of the DNS response for A or AAAA queries requesting the IP address of the tr. host.                                         |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``cdnId``                |  int   | Id of the CDN to which the delivery service belongs to.                                                                              |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``cdnName``              | string | Name of the CDN to which the delivery service belongs to.                                                                            |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``checkPath``            | string | The path portion of the URL to check this deliveryservice for health.                                                                |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``displayName``          | string | The display name of the delivery service.                                                                                            |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``dnsBypassCname``       | string |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``dnsBypassIp``          | string | The IPv4 IP to use for bypass on a DNS deliveryservice  - bypass starts when serving more than the                                   |
-  |                          |        | globalMaxMbps traffic on this deliveryservice.                                                                                       |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``dnsBypassIp6``         | string | The IPv6 IP to use for bypass on a DNS deliveryservice - bypass starts when serving more than the                                    |
-  |                          |        | globalMaxMbps traffic on this deliveryservice.                                                                                       |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``dnsBypassTtl``         |  int   | The TTL of the DNS bypass response.                                                                                                  |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``dscp``                 |  int   | The Differentiated Services Code Point (DSCP) with which to mark downstream (EDGE ->  customer) traffic.                             |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``edgeHeaderRewrite``    | string | The EDGE header rewrite actions to perform.                                                                                          |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``exampleURLs``          | array  | Entry points into the CDN for this deliveryservice.                                                                                  |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``geoLimitRedirectUrl``  | string |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``geoLimit``             |  int   | - 0: None - no limitations                                                                                                           |
-  |                          |        | - 1: Only route on CZF file hit                                                                                                      |
-  |                          |        | - 2: Only route on CZF hit or when from USA                                                                                          |
-  |                          |        |                                                                                                                                      |
-  |                          |        | Note that this does not prevent access to content or makes content secure; it just prevents                                          |
-  |                          |        | routing to the content by Traffic Router.                                                                                            |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``geoLimitCountries``    | string |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``geoProvider``          |  int   |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``globalMaxMbps``        |  int   | The maximum global bandwidth allowed on this deliveryservice. If exceeded, the traffic routes to the                                 |
-  |                          |        | dnsByPassIp* for DNS deliveryservices and to the httpBypassFqdn for HTTP deliveryservices.                                           |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``globalMaxTps``         |  int   | The maximum global transactions per second allowed on this deliveryservice. When this is exceeded                                    |
-  |                          |        | traffic will be sent to the dnsByPassIp* for DNS deliveryservices and to the httpBypassFqdn for                                      |
-  |                          |        | HTTP deliveryservices                                                                                                                |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``httpBypassFqdn``       | string | The HTTP destination to use for bypass on an HTTP deliveryservice - bypass starts when serving more than the                         |
-  |                          |        | globalMaxMbps traffic on this deliveryservice.                                                                                       |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``id``                   |  int   | The deliveryservice id (database row number).                                                                                        |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``infoUrl``              | string | Use this to add a URL that points to more information about that deliveryservice.                                                    |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``initialDispersion``    |  int   |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``ipv6RoutingEnabled``   |  bool  | false: send IPv4 address of Traffic Router to client on HTTP type del.                                                               |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``lastUpdated``          | string |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``logsEnabled``          |  bool  |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``longDesc``             | string | Description field.                                                                                                                   |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``longDesc1``            | string | Description field 1.                                                                                                                 |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``longDesc2``            | string | Description field 2.                                                                                                                 |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``matchList``            | array  | Array of matchList hashes.                                                                                                           |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``>>type``               | string | The type of MatchList (one of :ref:to-api-v11-types use_in_table='regex').                                                           |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``>>setNumber``          | string | The set Number of the matchList.                                                                                                     |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``>>pattern``            | string | The regexp for the matchList.                                                                                                        |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``maxDnsAnswers``        |  int   | The maximum number of IPs to put in a A/AAAA response for a DNS deliveryservice (0 means all                                         |
-  |                          |        | available).                                                                                                                          |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``midHeaderRewrite``     | string | The MID header rewrite actions to perform.                                                                                           |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``missLat``              | float  | The latitude as decimal degrees to use when the client cannot be found in the CZF or the Geo lookup.                                 |
-  |                          |        |                                                                                                                                      |
-  |                          |        | - e.g. 39.7391500 or null                                                                                                            |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``missLong``             | float  | The longitude as decimal degrees to use when the client cannot be found in the CZF or the Geo lookup.                                |
-  |                          |        |                                                                                                                                      |
-  |                          |        | - e.g. -104.9847000 or null                                                                                                          |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``multiSiteOrigin``      |  bool  | Is the Multi Site Origin feature enabled for this delivery service (0=false, 1=true). See :ref:`rl-multi-site-origin`                |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``orgServerFqdn``        | string | The origin server base URL (FQDN when used in this instance, includes the                                                            |
-  |                          |        | protocol (http:// or https://) for use in retrieving content from the origin server.                                                 |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``originShield``         | string |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``profileDescription``   | string | The description of the Traffic Router Profile with which this deliveryservice is associated.                                         |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``profileId``            |  int   | The id of the Traffic Router Profile with which this deliveryservice is associated.                                                  |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``profileName``          | string | The name of the Traffic Router Profile with which this deliveryservice is associated.                                                |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``protocol``             |  int   | - 0: serve with http:// at EDGE                                                                                                      |
-  |                          |        | - 1: serve with https:// at EDGE                                                                                                     |
-  |                          |        | - 2: serve with both http:// and https:// at EDGE                                                                                    |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``qstringIgnore``        |  int   | - 0: no special query string handling; it is for use in the cache-key and pass up to origin.                                         |
-  |                          |        | - 1: ignore query string in cache-key, but pass it up to parent and or origin.                                                       |
-  |                          |        | - 2: drop query string at edge, and do not use it in the cache-key.                                                                  |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``rangeRequestHandling`` |  int   | How to treat range requests:                                                                                                         |
-  |                          |        |                                                                                                                                      |
-  |                          |        | - 0 Do not cache (ranges requested from files taht are already cached due to a non range request will be a HIT)                      |
-  |                          |        | - 1 Use the `background_fetch <https://docs.trafficserver.apache.org/en/latest/reference/plugins/background_fetch.en.html>`_ plugin. |
-  |                          |        | - 2 Use the cache_range_requests plugin.                                                                                             |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``regexRemap``           | string | Regex Remap rule to apply to this delivery service at the Edge tier.                                                                 |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``regionalGeoBlocking``  |  bool  | Regex Remap rule to apply to this delivery service at the Edge tier.                                                                 |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``remapText``            | string | Additional raw remap line text.                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``routingName``          | string | The routing name of this deliveryservice, e.g. <routingName>.<xmlId>.cdn.com.                                                        |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``signed``               |  bool  | - false: token based auth (see :ref:token-based-auth) is not enabled for this deliveryservice.                                       |
-  |                          |        | - true: token based auth is enabled for this deliveryservice.                                                                        |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``signingAlgorithm``     | string | - null: token based auth (see :ref:token-based-auth) is not enabled for this deliveryservice.                                        |
-  |                          |        | - "url_sig": URL Sign token based auth is enabled for this deliveryservice.                                                          |
-  |                          |        | - "uri_signing": URI Signing token based auth is enabled for this deliveryservice.                                                   |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``sslKeyVersion``        |  int   |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``tenant``               | string | Owning tenant name                                                                                                                   |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``tenantId``             | int    | Owning tenant ID                                                                                                                     |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``trRequestHeaders``     | string |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``trResponseHeaders``    | string |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``typeId``               |  int   | The type of this deliveryservice (one of :ref:to-api-v11-types use_in_table='deliveryservice').                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``xmlId``                | string | Unique string that describes this deliveryservice.                                                                                   |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | Parameter                    | Type   | Description                                                                                                                          |
+  +==============================+========+======================================================================================================================================+
+  | ``active``                   | bool   | true if active, false if inactive.                                                                                                   |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``anonymousBlockingEnabled`` | bool   | - true: enable blocking clients with anonymous ips                                                                                   |
+  |                              |        | - false: disabled                                                                                                                    |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``cacheurl``                 | string | Cache URL rule to apply to this delivery service.                                                                                    |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``ccrDnsTtl``                | int    | The TTL of the DNS response for A or AAAA queries requesting the IP address of the tr. host.                                         |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``cdnId``                    | int    | Id of the CDN to which the delivery service belongs to.                                                                              |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``cdnName``                  | string | Name of the CDN to which the delivery service belongs to.                                                                            |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``checkPath``                | string | The path portion of the URL to check this deliveryservice for health.                                                                |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``displayName``              | string | The display name of the delivery service.                                                                                            |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``dnsBypassCname``           | string |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``dnsBypassIp``              | string | The IPv4 IP to use for bypass on a DNS deliveryservice  - bypass starts when serving more than the                                   |
+  |                              |        | globalMaxMbps traffic on this deliveryservice.                                                                                       |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``dnsBypassIp6``             | string | The IPv6 IP to use for bypass on a DNS deliveryservice - bypass starts when serving more than the                                    |
+  |                              |        | globalMaxMbps traffic on this deliveryservice.                                                                                       |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``dnsBypassTtl``             | int    | The TTL of the DNS bypass response.                                                                                                  |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``dscp``                     | int    | The Differentiated Services Code Point (DSCP) with which to mark downstream (EDGE ->  customer) traffic.                             |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``edgeHeaderRewrite``        | string | The EDGE header rewrite actions to perform.                                                                                          |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``exampleURLs``              | array  | Entry points into the CDN for this deliveryservice.                                                                                  |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``geoLimitRedirectUrl``      | string |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``geoLimit``                 | int    | - 0: None - no limitations                                                                                                           |
+  |                              |        | - 1: Only route on CZF file hit                                                                                                      |
+  |                              |        | - 2: Only route on CZF hit or when from USA                                                                                          |
+  |                              |        |                                                                                                                                      |
+  |                              |        | Note that this does not prevent access to content or makes content secure; it just prevents                                          |
+  |                              |        | routing to the content by Traffic Router.                                                                                            |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``geoLimitCountries``        | string |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``geoProvider``              | int    |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``globalMaxMbps``            | int    | The maximum global bandwidth allowed on this deliveryservice. If exceeded, the traffic routes to the                                 |
+  |                              |        | dnsByPassIp* for DNS deliveryservices and to the httpBypassFqdn for HTTP deliveryservices.                                           |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``globalMaxTps``             | int    | The maximum global transactions per second allowed on this deliveryservice. When this is exceeded                                    |
+  |                              |        | traffic will be sent to the dnsByPassIp* for DNS deliveryservices and to the httpBypassFqdn for                                      |
+  |                              |        | HTTP deliveryservices                                                                                                                |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``httpBypassFqdn``           | string | The HTTP destination to use for bypass on an HTTP deliveryservice - bypass starts when serving more than the                         |
+  |                              |        | globalMaxMbps traffic on this deliveryservice.                                                                                       |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``id``                       | int    | The deliveryservice id (database row number).                                                                                        |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``infoUrl``                  | string | Use this to add a URL that points to more information about that deliveryservice.                                                    |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``initialDispersion``        | int    |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``ipv6RoutingEnabled``       | bool   | false: send IPv4 address of Traffic Router to client on HTTP type del.                                                               |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``lastUpdated``              | string |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``logsEnabled``              | bool   |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``longDesc``                 | string | Description field.                                                                                                                   |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``longDesc1``                | string | Description field 1.                                                                                                                 |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``longDesc2``                | string | Description field 2.                                                                                                                 |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``matchList``                | array  | Array of matchList hashes.                                                                                                           |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``>>type``                   | string | The type of MatchList (one of :ref:to-api-v11-types use_in_table='regex').                                                           |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``>>setNumber``              | string | The set Number of the matchList.                                                                                                     |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``>>pattern``                | string | The regexp for the matchList.                                                                                                        |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``maxDnsAnswers``            | int    | The maximum number of IPs to put in a A/AAAA response for a DNS deliveryservice (0 means all                                         |
+  |                              |        | available).                                                                                                                          |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``midHeaderRewrite``         | string | The MID header rewrite actions to perform.                                                                                           |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``missLat``                  | float  | The latitude as decimal degrees to use when the client cannot be found in the CZF or the Geo lookup.                                 |
+  |                              |        | - e.g. 39.7391500 or null                                                                                                            |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``missLong``                 | float  | The longitude as decimal degrees to use when the client cannot be found in the CZF or the Geo lookup.                                |
+  |                              |        | - e.g. -104.9847000 or null                                                                                                          |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``multiSiteOrigin``          | bool   | Is the Multi Site Origin feature enabled for this delivery service (0=false, 1=true). See :ref:`rl-multi-site-origin`                |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``orgServerFqdn``            | string | The origin server base URL (FQDN when used in this instance, includes the                                                            |
+  |                              |        | protocol (http:// or https://) for use in retrieving content from the origin server.                                                 |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``originShield``             | string |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``profileDescription``       | string | The description of the Traffic Router Profile with which this deliveryservice is associated.                                         |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``profileId``                | int    | The id of the Traffic Router Profile with which this deliveryservice is associated.                                                  |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``profileName``              | string | The name of the Traffic Router Profile with which this deliveryservice is associated.                                                |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``protocol``                 | int    | - 0: serve with http:// at EDGE                                                                                                      |
+  |                              |        | - 1: serve with https:// at EDGE                                                                                                     |
+  |                              |        | - 2: serve with both http:// and https:// at EDGE                                                                                    |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``qstringIgnore``            | int    | - 0: no special query string handling; it is for use in the cache-key and pass up to origin.                                         |
+  |                              |        | - 1: ignore query string in cache-key, but pass it up to parent and or origin.                                                       |
+  |                              |        | - 2: drop query string at edge, and do not use it in the cache-key.                                                                  |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``rangeRequestHandling``     | int    | How to treat range requests:                                                                                                         |
+  |                              |        | - 0 Do not cache (ranges requested from files taht are already cached due to a non range request will be a HIT)                      |
+  |                              |        | - 1 Use the `background_fetch <https://docs.trafficserver.apache.org/en/latest/reference/plugins/background_fetch.en.html>`_ plugin. |
+  |                              |        | - 2 Use the cache_range_requests plugin.                                                                                             |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``regexRemap``               | string | Regex Remap rule to apply to this delivery service at the Edge tier.                                                                 |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``regionalGeoBlocking``      | bool   | Regex Remap rule to apply to this delivery service at the Edge tier.                                                                 |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``remapText``                | string | Additional raw remap line text.                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``routingName``              | string | The routing name of this deliveryservice, e.g. <routingName>.<xmlId>.cdn.com.                                                        |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``signed``                   | bool   | - false: token based auth (see :ref:token-based-auth) is not enabled for this deliveryservice.                                       |
+  |                              |        | - true: token based auth is enabled for this deliveryservice.                                                                        |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``signingAlgorithm``         | string | - null: token based auth (see :ref:token-based-auth) is not enabled for this deliveryservice.                                        |
+  |                              |        | - "url_sig": URL Sign token based auth is enabled for this deliveryservice.                                                          |
+  |                              |        | - "uri_signing": URI Signing token based auth is enabled for this deliveryservice.                                                   |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``sslKeyVersion``            | int    |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``tenant``                   | string | Owning tenant name                                                                                                                   |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``tenantId``                 | int    | Owning tenant ID                                                                                                                     |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``trRequestHeaders``         | string |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``trResponseHeaders``        | string |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``typeId``                   | int    | The type of this deliveryservice (one of :ref:to-api-v11-types use_in_table='deliveryservice').                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``xmlId``                    | string | Unique string that describes this deliveryservice.                                                                                   |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
 
   **Response Example** ::
 
@@ -444,6 +445,7 @@ Delivery Service
       "response": [
         {
             "active": true,
+            "anonymousBlockingEnabled": false,
             "cacheurl": null,
             "ccrDnsTtl": "3600",
             "cdnId": "2",
@@ -2049,142 +2051,144 @@ URL Sig Keys
 
   **Request Properties**
 
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | Parameter              | Required | Description                                                                                             |
-  +========================+==========+=========================================================================================================+
-  | active                 | yes      | true if active, false if inactive.                                                                      |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | cacheurl               | no       | Cache URL rule to apply to this delivery service.                                                       |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | ccrDnsTtl              | no       | The TTL of the DNS response for A or AAAA queries requesting the IP address of the tr.host.             |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | cdnId                  | yes      | cdn id                                                                                                  |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | checkPath              | no       | The path portion of the URL to check this deliveryservice for health.                                   |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | displayName            | yes      | Display name                                                                                            |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | dnsBypassCname         | no       | Bypass CNAME                                                                                            |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | dnsBypassIp            | no       | The IPv4 IP to use for bypass on a DNS deliveryservice - bypass starts when serving more than the       |
-  |                        |          | globalMaxMbps traffic on this deliveryservice.                                                          |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | dnsBypassIp6           | no       | The IPv6 IP to use for bypass on a DNS deliveryservice - bypass starts when serving more than the       |
-  |                        |          | globalMaxMbps traffic on this deliveryservice.                                                          |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | dnsBypassTtl           | no       | The TTL of the DNS bypass response.                                                                     |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | dscp                   | yes      | The Differentiated Services Code Point (DSCP) with which to mark downstream (EDGE -> customer) traffic. |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | edgeHeaderRewrite      | no       | The EDGE header rewrite actions to perform.                                                             |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | geoLimitRedirectURL    | no       | This is the URL Traffic Router will redirect to when Geo Limit Failure.                                 |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | geoLimit               | yes      | - 0: None - no limitations                                                                              |
-  |                        |          | - 1: Only route on CZF file hit                                                                         |
-  |                        |          | - 2: Only route on CZF hit or when from geo limit countries                                             |
-  |                        |          |                                                                                                         |
-  |                        |          | Note that this does not prevent access to content or makes content secure; it just prevents             |
-  |                        |          | routing to the content by Traffic Router.                                                               |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | geoLimitCountries      | no       | The geo limit countries.                                                                                |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | geoProvider            | yes      | - 0: Maxmind(default)                                                                                   |
-  |                        |          | - 1: Neustar                                                                                            |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | globalMaxMbps          | no       | The maximum global bandwidth allowed on this deliveryservice. If exceeded, the traffic routes to the    |
-  |                        |          | dnsByPassIp* for DNS deliveryservices and to the httpBypassFqdn for HTTP deliveryservices.              |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | globalMaxTps           | no       | The maximum global transactions per second allowed on this deliveryservice. When this is exceeded       |
-  |                        |          | traffic will be sent to the dnsByPassIp* for DNS deliveryservices and to the httpBypassFqdn for         |
-  |                        |          | HTTP deliveryservices                                                                                   |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | httpBypassFqdn         | no       | The HTTP destination to use for bypass on an HTTP deliveryservice - bypass starts when serving more     |
-  |                        |          | than the globalMaxMbps traffic on this deliveryservice.                                                 |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | infoUrl                | no       | Use this to add a URL that points to more information about that deliveryservice.                       |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | initialDispersion      | yes|no   | Initial dispersion. Required for HTTP* delivery services.                                               |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | ipv6RoutingEnabled     | yes|no   | false: send IPv4 address of Traffic Router to client on HTTP type del.                                  |
-  |                        |          | Required for DNS*, HTTP* and STEERING* delivery services.                                               |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | logsEnabled            | yes      | - false: No                                                                                             |
-  |                        |          | - true: Yes                                                                                             |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | longDesc               | no       | Description field.                                                                                      |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | longDesc1              | no       | Description field 1.                                                                                    |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | longDesc2              | no       | Description field 2.                                                                                    |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | maxDnsAnswers          | no       | The maximum number of IPs to put in a A/AAAA response for a DNS deliveryservice (0 means all            |
-  |                        |          | available).                                                                                             |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | midHeaderRewrite       | no       | The MID header rewrite actions to perform.                                                              |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | missLat                | yes|no   | The latitude as decimal degrees to use when the client cannot be found in the CZF or the Geo lookup.    |
-  |                        |          | e.g. 39.7391500 or null. Required for DNS* and HTTP* delivery services.                                 |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | missLong               | yes|no   | The longitude as decimal degrees to use when the client cannot be found in the CZF or the Geo lookup.   |
-  |                        |          | e.g. -104.9847000 or null. Required for DNS* and HTTP* delivery services.                               |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | multiSiteOrigin        | yes|no   | true if enabled, false if disabled. Required for DNS* and HTTP* delivery services.                      |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | orgServerFqdn          | yes|no   | The origin server base URL (FQDN when used in this instance, includes the                               |
-  |                        |          | protocol (http:// or https://) for use in retrieving content from the origin server. This field is      |
-  |                        |          | required if type is DNS* or HTTP*.                                                                      |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | originShield           | no       | Origin shield                                                                                           |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | profileId              | no       | DS profile ID                                                                                           |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | protocol               | yes|no   | - 0: serve with http:// at EDGE                                                                         |
-  |                        |          | - 1: serve with https:// at EDGE                                                                        |
-  |                        |          | - 2: serve with both http:// and https:// at EDGE                                                       |
-  |                        |          |                                                                                                         |
-  |                        |          | Required for DNS*, HTTP* or *STEERING* delivery services.                                               |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | qstringIgnore          | yes|no   | - 0: no special query string handling; it is for use in the cache-key and pass up to origin.            |
-  |                        |          | - 1: ignore query string in cache-key, but pass it up to parent and or origin.                          |
-  |                        |          | - 2: drop query string at edge, and do not use it in the cache-key.                                     |
-  |                        |          |                                                                                                         |
-  |                        |          | Required for DNS* and HTTP* delivery services.                                                          |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | rangeRequestHandling   | yes|no   | How to treat range requests (required for DNS* and HTTP* delivery services):                            |
-  |                        |          |                                                                                                         |
-  |                        |          | - 0 Do not cache (ranges requested from files taht are already cached due to a non range request will   |
-  |                        |          |   be a HIT)                                                                                             |
-  |                        |          | - 1 Use the background_fetch plugin.                                                                    |
-  |                        |          | - 2 Use the cache_range_requests plugin.                                                                |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | regexRemap             | no       | Regex Remap rule to apply to this delivery service at the Edge tier.                                    |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | regionalGeoBlocking    | yes      | Is the Regional Geo Blocking feature enabled.                                                           |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | remapText              | no       | Additional raw remap line text.                                                                         |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | routingName            | yes      | The routing name of this deliveryservice, e.g. <routingName>.<xmlId>.cdn.com.                           |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | signed                 | no       | - false: token based auth (see :ref:token-based-auth) is not enabled for this deliveryservice.          |
-  |                        |          | - true: token based auth is enabled for this deliveryservice.                                           |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | signingAlgorithm       | no       | - null: token based auth (see :ref:token-based-auth) is not enabled for this deliveryservice.           |
-  |                        |          | - "url_sig": URL Sign token based auth is enabled for this deliveryservice.                             |
-  |                        |          | - "uri_signing": URI Signing token based auth is enabled for this deliveryservice.                      |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | sslKeyVersion          | no       | SSL key version                                                                                         |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | tenantId               | No       | Owning tenant ID                                                                                        |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | trRequestHeaders       | no       | Traffic router log request headers                                                                      |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | trResponseHeaders      | no       | Traffic router additional response headers                                                              |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | typeId                 | yes      | The type of this deliveryservice (one of :ref:to-api-v12-types use_in_table='deliveryservice').         |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | xmlId                  | yes      | Unique string that describes this deliveryservice.                                                      |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | Parameter                    | Required | Description                                                                                             |
+  +==============================+==========+=========================================================================================================+
+  | active                       | yes      | true if active, false if inactive.                                                                      |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | anonymousBlockingEnabled     | no       | - true: enable blocking clients with anonymous ips                                                      |
+  |                              |          | - false: disabled                                                                                       |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | cacheurl                     | no       | Cache URL rule to apply to this delivery service.                                                       |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | ccrDnsTtl                    | no       | The TTL of the DNS response for A or AAAA queries requesting the IP address of the tr.host.             |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | cdnId                        | yes      | cdn id                                                                                                  |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | checkPath                    | no       | The path portion of the URL to check this deliveryservice for health.                                   |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | displayName                  | yes      | Display name                                                                                            |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | dnsBypassCname               | no       | Bypass CNAME                                                                                            |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | dnsBypassIp                  | no       | The IPv4 IP to use for bypass on a DNS deliveryservice - bypass starts when serving more than the       |
+  |                              |          | globalMaxMbps traffic on this deliveryservice.                                                          |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | dnsBypassIp6                 | no       | The IPv6 IP to use for bypass on a DNS deliveryservice - bypass starts when serving more than the       |
+  |                              |          | globalMaxMbps traffic on this deliveryservice.                                                          |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | dnsBypassTtl                 | no       | The TTL of the DNS bypass response.                                                                     |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | dscp                         | yes      | The Differentiated Services Code Point (DSCP) with which to mark downstream (EDGE -> customer) traffic. |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | edgeHeaderRewrite            | no       | The EDGE header rewrite actions to perform.                                                             |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | geoLimitRedirectURL          | no       | This is the URL Traffic Router will redirect to when Geo Limit Failure.                                 |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | geoLimit                     | yes      | - 0: None - no limitations                                                                              |
+  |                              |          | - 1: Only route on CZF file hit                                                                         |
+  |                              |          | - 2: Only route on CZF hit or when from geo limit countries                                             |
+  |                              |          |                                                                                                         |
+  |                              |          | Note that this does not prevent access to content or makes content secure; it just prevents             |
+  |                              |          | routing to the content by Traffic Router.                                                               |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | geoLimitCountries            | no       | The geo limit countries.                                                                                |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | geoProvider                  | yes      | - 0: Maxmind(default)                                                                                   |
+  |                              |          | - 1: Neustar                                                                                            |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | globalMaxMbps                | no       | The maximum global bandwidth allowed on this deliveryservice. If exceeded, the traffic routes to the    |
+  |                              |          | dnsByPassIp* for DNS deliveryservices and to the httpBypassFqdn for HTTP deliveryservices.              |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | globalMaxTps                 | no       | The maximum global transactions per second allowed on this deliveryservice. When this is exceeded       |
+  |                              |          | traffic will be sent to the dnsByPassIp* for DNS deliveryservices and to the httpBypassFqdn for         |
+  |                              |          | HTTP deliveryservices                                                                                   |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | httpBypassFqdn               | no       | The HTTP destination to use for bypass on an HTTP deliveryservice - bypass starts when serving more     |
+  |                              |          | than the globalMaxMbps traffic on this deliveryservice.                                                 |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | infoUrl                      | no       | Use this to add a URL that points to more information about that deliveryservice.                       |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | initialDispersion            | yes|no   | Initial dispersion. Required for HTTP* delivery services.                                               |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | ipv6RoutingEnabled           | yes|no   | false: send IPv4 address of Traffic Router to client on HTTP type del.                                  |
+  |                              |          | Required for DNS*, HTTP* and STEERING* delivery services.                                               |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | logsEnabled                  | yes      | - false: No                                                                                             |
+  |                              |          | - true: Yes                                                                                             |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | longDesc                     | no       | Description field.                                                                                      |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | longDesc1                    | no       | Description field 1.                                                                                    |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | longDesc2                    | no       | Description field 2.                                                                                    |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | maxDnsAnswers                | no       | The maximum number of IPs to put in a A/AAAA response for a DNS deliveryservice (0 means all            |
+  |                              |          | available).                                                                                             |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | midHeaderRewrite             | no       | The MID header rewrite actions to perform.                                                              |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | missLat                      | yes|no   | The latitude as decimal degrees to use when the client cannot be found in the CZF or the Geo lookup.    |
+  |                              |          | e.g. 39.7391500 or null. Required for DNS* and HTTP* delivery services.                                 |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | missLong                     | yes|no   | The longitude as decimal degrees to use when the client cannot be found in the CZF or the Geo lookup.   |
+  |                              |          | e.g. -104.9847000 or null. Required for DNS* and HTTP* delivery services.                               |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | multiSiteOrigin              | yes|no   | true if enabled, false if disabled. Required for DNS* and HTTP* delivery services.                      |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | orgServerFqdn                | yes|no   | The origin server base URL (FQDN when used in this instance, includes the                               |
+  |                              |          | protocol (http:// or https://) for use in retrieving content from the origin server. This field is      |
+  |                              |          | required if type is DNS* or HTTP*.                                                                      |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | originShield                 | no       | Origin shield                                                                                           |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | profileId                    | no       | DS profile ID                                                                                           |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | protocol                     | yes|no   | - 0: serve with http:// at EDGE                                                                         |
+  |                              |          | - 1: serve with https:// at EDGE                                                                        |
+  |                              |          | - 2: serve with both http:// and https:// at EDGE                                                       |
+  |                              |          |                                                                                                         |
+  |                              |          | Required for DNS*, HTTP* or *STEERING* delivery services.                                               |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | qstringIgnore                | yes|no   | - 0: no special query string handling; it is for use in the cache-key and pass up to origin.            |
+  |                              |          | - 1: ignore query string in cache-key, but pass it up to parent and or origin.                          |
+  |                              |          | - 2: drop query string at edge, and do not use it in the cache-key.                                     |
+  |                              |          |                                                                                                         |
+  |                              |          | Required for DNS* and HTTP* delivery services.                                                          |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | rangeRequestHandling         | yes|no   | How to treat range requests (required for DNS* and HTTP* delivery services):                            |
+  |                              |          | - 0 Do not cache (ranges requested from files taht are already cached due to a non range request will   |
+  |                              |          | be a HIT)                                                                                               |
+  |                              |          | - 1 Use the background_fetch plugin.                                                                    |
+  |                              |          | - 2 Use the cache_range_requests plugin.                                                                |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | regexRemap                   | no       | Regex Remap rule to apply to this delivery service at the Edge tier.                                    |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | regionalGeoBlocking          | yes      | Is the Regional Geo Blocking feature enabled.                                                           |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | remapText                    | no       | Additional raw remap line text.                                                                         |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | routingName                  | yes      | The routing name of this deliveryservice, e.g. <routingName>.<xmlId>.cdn.com.                           |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | signed                       | no       | - false: token based auth (see :ref:token-based-auth) is not enabled for this deliveryservice.          |
+  |                              |          | - true: token based auth is enabled for this deliveryservice.                                           |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | signingAlgorithm             | no       | - null: token based auth (see :ref:token-based-auth) is not enabled for this deliveryservice.           |
+  |                              |          | - "url_sig": URL Sign token based auth is enabled for this deliveryservice.                             |
+  |                              |          | - "uri_signing": URI Signing token based auth is enabled for this deliveryservice.                      |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | sslKeyVersion                | no       | SSL key version                                                                                         |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | tenantId                     | No       | Owning tenant ID                                                                                        |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | trRequestHeaders             | no       | Traffic router log request headers                                                                      |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | trResponseHeaders            | no       | Traffic router additional response headers                                                              |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | typeId                       | yes      | The type of this deliveryservice (one of :ref:to-api-v12-types use_in_table='deliveryservice').         |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | xmlId                        | yes      | Unique string that describes this deliveryservice.                                                      |
+  +------------------------------+----------+---------------------------------------------------------------------------------------------------------+
 
 
   **Request Example** ::
@@ -2210,6 +2214,7 @@ URL Sig Keys
         "qstringIgnore": 0,
         "rangeRequestHandling": 0,
         "regionalGeoBlocking": false,
+        "anonymousBlockingEnabled": false,
         "signed": false,
         "signingAlgorithm": null
     }
@@ -2217,153 +2222,153 @@ URL Sig Keys
 
   **Response Properties**
 
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  |        Parameter         |  Type  |                                                             Description                                                              |
-  +==========================+========+======================================================================================================================================+
-  | ``active``               |  bool  | true if active, false if inactive.                                                                                                   |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``cacheurl``             | string | Cache URL rule to apply to this delivery service.                                                                                    |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``ccrDnsTtl``            |  int   | The TTL of the DNS response for A or AAAA queries requesting the IP address of the tr. host.                                         |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``cdnId``                |  int   | Id of the CDN to which the delivery service belongs to.                                                                              |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``cdnName``              | string | Name of the CDN to which the delivery service belongs to.                                                                            |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``checkPath``            | string | The path portion of the URL to check this deliveryservice for health.                                                                |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``displayName``          | string | The display name of the delivery service.                                                                                            |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``dnsBypassCname``       | string |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``dnsBypassIp``          | string | The IPv4 IP to use for bypass on a DNS deliveryservice  - bypass starts when serving more than the                                   |
-  |                          |        | globalMaxMbps traffic on this deliveryservice.                                                                                       |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``dnsBypassIp6``         | string | The IPv6 IP to use for bypass on a DNS deliveryservice - bypass starts when serving more than the                                    |
-  |                          |        | globalMaxMbps traffic on this deliveryservice.                                                                                       |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``dnsBypassTtl``         |  int   | The TTL of the DNS bypass response.                                                                                                  |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``dscp``                 |  int   | The Differentiated Services Code Point (DSCP) with which to mark downstream (EDGE ->  customer) traffic.                             |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``edgeHeaderRewrite``    | string | The EDGE header rewrite actions to perform.                                                                                          |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``exampleURLs``          | array  | Entry points into the CDN for this deliveryservice.                                                                                  |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``geoLimitRedirectUrl``  | string |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``geoLimit``             |  int   | - 0: None - no limitations                                                                                                           |
-  |                          |        | - 1: Only route on CZF file hit                                                                                                      |
-  |                          |        | - 2: Only route on CZF hit or when from USA                                                                                          |
-  |                          |        |                                                                                                                                      |
-  |                          |        | Note that this does not prevent access to content or makes content secure; it just prevents                                          |
-  |                          |        | routing to the content by Traffic Router.                                                                                            |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``geoLimitCountries``    | string |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``geoProvider``          |  int   |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``globalMaxMbps``        |  int   | The maximum global bandwidth allowed on this deliveryservice. If exceeded, the traffic routes to the                                 |
-  |                          |        | dnsByPassIp* for DNS deliveryservices and to the httpBypassFqdn for HTTP deliveryservices.                                           |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``globalMaxTps``         |  int   | The maximum global transactions per second allowed on this deliveryservice. When this is exceeded                                    |
-  |                          |        | traffic will be sent to the dnsByPassIp* for DNS deliveryservices and to the httpBypassFqdn for                                      |
-  |                          |        | HTTP deliveryservices                                                                                                                |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``httpBypassFqdn``       | string | The HTTP destination to use for bypass on an HTTP deliveryservice - bypass starts when serving more than the                         |
-  |                          |        | globalMaxMbps traffic on this deliveryservice.                                                                                       |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``id``                   |  int   | The deliveryservice id (database row number).                                                                                        |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``infoUrl``              | string | Use this to add a URL that points to more information about that deliveryservice.                                                    |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``initialDispersion``    |  int   |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``ipv6RoutingEnabled``   |  bool  | false: send IPv4 address of Traffic Router to client on HTTP type del.                                                               |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``lastUpdated``          | string |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``logsEnabled``          |  bool  |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``longDesc``             | string | Description field.                                                                                                                   |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``longDesc1``            | string | Description field 1.                                                                                                                 |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``longDesc2``            | string | Description field 2.                                                                                                                 |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``matchList``            | array  | Array of matchList hashes.                                                                                                           |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``>>type``               | string | The type of MatchList (one of :ref:to-api-v11-types use_in_table='regex').                                                           |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``>>setNumber``          | string | The set Number of the matchList.                                                                                                     |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``>>pattern``            | string | The regexp for the matchList.                                                                                                        |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``maxDnsAnswers``        |  int   | The maximum number of IPs to put in a A/AAAA response for a DNS deliveryservice (0 means all                                         |
-  |                          |        | available).                                                                                                                          |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``midHeaderRewrite``     | string | The MID header rewrite actions to perform.                                                                                           |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``missLat``              | float  | The latitude as decimal degrees to use when the client cannot be found in the CZF or the Geo lookup.                                 |
-  |                          |        |                                                                                                                                      |
-  |                          |        | - e.g. 39.7391500 or null                                                                                                            |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``missLong``             | float  | The longitude as decimal degrees to use when the client cannot be found in the CZF or the Geo lookup.                                |
-  |                          |        |                                                                                                                                      |
-  |                          |        | - e.g. -104.9847000 or null                                                                                                          |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``multiSiteOrigin``      |  bool  | Is the Multi Site Origin feature enabled for this delivery service (0=false, 1=true). See :ref:`rl-multi-site-origin`                |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``orgServerFqdn``        | string | The origin server base URL (FQDN when used in this instance, includes the                                                            |
-  |                          |        | protocol (http:// or https://) for use in retrieving content from the origin server.                                                 |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``originShield``         | string |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``profileDescription``   | string | The description of the Traffic Router Profile with which this deliveryservice is associated.                                         |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``profileId``            |  int   | The id of the Traffic Router Profile with which this deliveryservice is associated.                                                  |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``profileName``          | string | The name of the Traffic Router Profile with which this deliveryservice is associated.                                                |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``protocol``             |  int   | - 0: serve with http:// at EDGE                                                                                                      |
-  |                          |        | - 1: serve with https:// at EDGE                                                                                                     |
-  |                          |        | - 2: serve with both http:// and https:// at EDGE                                                                                    |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``qstringIgnore``        |  int   | - 0: no special query string handling; it is for use in the cache-key and pass up to origin.                                         |
-  |                          |        | - 1: ignore query string in cache-key, but pass it up to parent and or origin.                                                       |
-  |                          |        | - 2: drop query string at edge, and do not use it in the cache-key.                                                                  |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``rangeRequestHandling`` |  int   | How to treat range requests:                                                                                                         |
-  |                          |        |                                                                                                                                      |
-  |                          |        | - 0 Do not cache (ranges requested from files taht are already cached due to a non range request will be a HIT)                      |
-  |                          |        | - 1 Use the `background_fetch <https://docs.trafficserver.apache.org/en/latest/reference/plugins/background_fetch.en.html>`_ plugin. |
-  |                          |        | - 2 Use the cache_range_requests plugin.                                                                                             |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``regexRemap``           | string | Regex Remap rule to apply to this delivery service at the Edge tier.                                                                 |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``regionalGeoBlocking``  |  bool  | Regex Remap rule to apply to this delivery service at the Edge tier.                                                                 |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``remapText``            | string | Additional raw remap line text.                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``routingName``          | string | The routing name of this deliveryservice, e.g. <routingName>.<xmlId>.cdn.com.                                                        |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``signed``               |  bool  | - false: token based auth (see :ref:token-based-auth) is not enabled for this deliveryservice.                                       |
-  |                          |        | - true: token based auth is enabled for this deliveryservice.                                                                        |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``signingAlgorithm``     | string | - null: token based auth (see :ref:token-based-auth) is not enabled for this deliveryservice.                                        |
-  |                          |        | - "url_sig": URL Sign token based auth is enabled for this deliveryservice.                                                          |
-  |                          |        | - "uri_signing": URI Signing token based auth is enabled for this deliveryservice.                                                   |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``sslKeyVersion``        |  int   |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``trRequestHeaders``     | string |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``trResponseHeaders``    | string |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``typeId``               |  int   | The type of this deliveryservice (one of :ref:to-api-v11-types use_in_table='deliveryservice').                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``xmlId``                | string | Unique string that describes this deliveryservice.                                                                                   |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | Parameter                    | Type   | Description                                                                                                                          |
+  +==============================+========+======================================================================================================================================+
+  | ``active``                   | bool   | true if active, false if inactive.                                                                                                   |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``anonymousBlockingEnabled`` | bool   | - true: enable blocking clients with anonymous ips                                                                                   |
+  |                              |        | - false: disabled                                                                                                                    |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``cacheurl``                 | string | Cache URL rule to apply to this delivery service.                                                                                    |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``ccrDnsTtl``                | int    | The TTL of the DNS response for A or AAAA queries requesting the IP address of the tr. host.                                         |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``cdnId``                    | int    | Id of the CDN to which the delivery service belongs to.                                                                              |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``cdnName``                  | string | Name of the CDN to which the delivery service belongs to.                                                                            |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``checkPath``                | string | The path portion of the URL to check this deliveryservice for health.                                                                |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``displayName``              | string | The display name of the delivery service.                                                                                            |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``dnsBypassCname``           | string |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``dnsBypassIp``              | string | The IPv4 IP to use for bypass on a DNS deliveryservice  - bypass starts when serving more than the                                   |
+  |                              |        | globalMaxMbps traffic on this deliveryservice.                                                                                       |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``dnsBypassIp6``             | string | The IPv6 IP to use for bypass on a DNS deliveryservice - bypass starts when serving more than the                                    |
+  |                              |        | globalMaxMbps traffic on this deliveryservice.                                                                                       |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``dnsBypassTtl``             | int    | The TTL of the DNS bypass response.                                                                                                  |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``dscp``                     | int    | The Differentiated Services Code Point (DSCP) with which to mark downstream (EDGE ->  customer) traffic.                             |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``edgeHeaderRewrite``        | string | The EDGE header rewrite actions to perform.                                                                                          |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``exampleURLs``              | array  | Entry points into the CDN for this deliveryservice.                                                                                  |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``geoLimitRedirectUrl``      | string |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``geoLimit``                 | int    | - 0: None - no limitations                                                                                                           |
+  |                              |        | - 1: Only route on CZF file hit                                                                                                      |
+  |                              |        | - 2: Only route on CZF hit or when from USA                                                                                          |
+  |                              |        |                                                                                                                                      |
+  |                              |        | Note that this does not prevent access to content or makes content secure; it just prevents                                          |
+  |                              |        | routing to the content by Traffic Router.                                                                                            |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``geoLimitCountries``        | string |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``geoProvider``              | int    |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``globalMaxMbps``            | int    | The maximum global bandwidth allowed on this deliveryservice. If exceeded, the traffic routes to the                                 |
+  |                              |        | dnsByPassIp* for DNS deliveryservices and to the httpBypassFqdn for HTTP deliveryservices.                                           |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``globalMaxTps``             | int    | The maximum global transactions per second allowed on this deliveryservice. When this is exceeded                                    |
+  |                              |        | traffic will be sent to the dnsByPassIp* for DNS deliveryservices and to the httpBypassFqdn for                                      |
+  |                              |        | HTTP deliveryservices                                                                                                                |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``httpBypassFqdn``           | string | The HTTP destination to use for bypass on an HTTP deliveryservice - bypass starts when serving more than the                         |
+  |                              |        | globalMaxMbps traffic on this deliveryservice.                                                                                       |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``id``                       | int    | The deliveryservice id (database row number).                                                                                        |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``infoUrl``                  | string | Use this to add a URL that points to more information about that deliveryservice.                                                    |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``initialDispersion``        | int    |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``ipv6RoutingEnabled``       | bool   | false: send IPv4 address of Traffic Router to client on HTTP type del.                                                               |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``lastUpdated``              | string |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``logsEnabled``              | bool   |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``longDesc``                 | string | Description field.                                                                                                                   |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``longDesc1``                | string | Description field 1.                                                                                                                 |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``longDesc2``                | string | Description field 2.                                                                                                                 |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``matchList``                | array  | Array of matchList hashes.                                                                                                           |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``>>type``                   | string | The type of MatchList (one of :ref:to-api-v11-types use_in_table='regex').                                                           |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``>>setNumber``              | string | The set Number of the matchList.                                                                                                     |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``>>pattern``                | string | The regexp for the matchList.                                                                                                        |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``maxDnsAnswers``            | int    | The maximum number of IPs to put in a A/AAAA response for a DNS deliveryservice (0 means all                                         |
+  |                              |        | available).                                                                                                                          |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``midHeaderRewrite``         | string | The MID header rewrite actions to perform.                                                                                           |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``missLat``                  | float  | The latitude as decimal degrees to use when the client cannot be found in the CZF or the Geo lookup.                                 |
+  |                              |        | - e.g. 39.7391500 or null                                                                                                            |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``missLong``                 | float  | The longitude as decimal degrees to use when the client cannot be found in the CZF or the Geo lookup.                                |
+  |                              |        | - e.g. -104.9847000 or null                                                                                                          |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``multiSiteOrigin``          | bool   | Is the Multi Site Origin feature enabled for this delivery service (0=false, 1=true). See :ref:`rl-multi-site-origin`                |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``orgServerFqdn``            | string | The origin server base URL (FQDN when used in this instance, includes the                                                            |
+  |                              |        | protocol (http:// or https://) for use in retrieving content from the origin server.                                                 |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``originShield``             | string |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``profileDescription``       | string | The description of the Traffic Router Profile with which this deliveryservice is associated.                                         |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``profileId``                | int    | The id of the Traffic Router Profile with which this deliveryservice is associated.                                                  |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``profileName``              | string | The name of the Traffic Router Profile with which this deliveryservice is associated.                                                |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``protocol``                 | int    | - 0: serve with http:// at EDGE                                                                                                      |
+  |                              |        | - 1: serve with https:// at EDGE                                                                                                     |
+  |                              |        | - 2: serve with both http:// and https:// at EDGE                                                                                    |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``qstringIgnore``            | int    | - 0: no special query string handling; it is for use in the cache-key and pass up to origin.                                         |
+  |                              |        | - 1: ignore query string in cache-key, but pass it up to parent and or origin.                                                       |
+  |                              |        | - 2: drop query string at edge, and do not use it in the cache-key.                                                                  |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``rangeRequestHandling``     | int    | How to treat range requests:                                                                                                         |
+  |                              |        | - 0 Do not cache (ranges requested from files taht are already cached due to a non range request will be a HIT)                      |
+  |                              |        | - 1 Use the `background_fetch <https://docs.trafficserver.apache.org/en/latest/reference/plugins/background_fetch.en.html>`_ plugin. |
+  |                              |        | - 2 Use the cache_range_requests plugin.                                                                                             |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``regexRemap``               | string | Regex Remap rule to apply to this delivery service at the Edge tier.                                                                 |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``regionalGeoBlocking``      | bool   | Regex Remap rule to apply to this delivery service at the Edge tier.                                                                 |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``remapText``                | string | Additional raw remap line text.                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``routingName``              | string | The routing name of this deliveryservice, e.g. <routingName>.<xmlId>.cdn.com.                                                        |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``signed``                   | bool   | - false: token based auth (see :ref:token-based-auth) is not enabled for this deliveryservice.                                       |
+  |                              |        | - true: token based auth is enabled for this deliveryservice.                                                                        |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``signingAlgorithm``         | string | - null: token based auth (see :ref:token-based-auth) is not enabled for this deliveryservice.                                        |
+  |                              |        | - "url_sig": URL Sign token based auth is enabled for this deliveryservice.                                                          |
+  |                              |        | - "uri_signing": URI Signing token based auth is enabled for this deliveryservice.                                                   |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``sslKeyVersion``            | int    |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``trRequestHeaders``         | string |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``trResponseHeaders``        | string |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``typeId``                   | int    | The type of this deliveryservice (one of :ref:to-api-v11-types use_in_table='deliveryservice').                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``xmlId``                    | string | Unique string that describes this deliveryservice.                                                                                   |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
 
   **Response Example** ::
 
@@ -2371,6 +2376,7 @@ URL Sig Keys
       "response": [
         {
             "active": true,
+            "anonymousBlockingEnabled": false,
             "cacheurl": null,
             "ccrDnsTtl": "3600",
             "cdnId": "2",
@@ -2459,142 +2465,144 @@ URL Sig Keys
 
   **Request Properties**
 
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | Parameter              | Required | Description                                                                                             |
-  +========================+==========+=========================================================================================================+
-  | active                 | yes      | true if active, false if inactive.                                                                      |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | cacheurl               | no       | Cache URL rule to apply to this delivery service.                                                       |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | ccrDnsTtl              | no       | The TTL of the DNS response for A or AAAA queries requesting the IP address of the tr.host.             |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | cdnId                  | yes      | cdn id                                                                                                  |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | checkPath              | no       | The path portion of the URL to check this deliveryservice for health.                                   |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | displayName            | yes      | Display name                                                                                            |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | dnsBypassCname         | no       | Bypass CNAME                                                                                            |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | dnsBypassIp            | no       | The IPv4 IP to use for bypass on a DNS deliveryservice - bypass starts when serving more than the       |
-  |                        |          | globalMaxMbps traffic on this deliveryservice.                                                          |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | dnsBypassIp6           | no       | The IPv6 IP to use for bypass on a DNS deliveryservice - bypass starts when serving more than the       |
-  |                        |          | globalMaxMbps traffic on this deliveryservice.                                                          |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | dnsBypassTtl           | no       | The TTL of the DNS bypass response.                                                                     |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | dscp                   | yes      | The Differentiated Services Code Point (DSCP) with which to mark downstream (EDGE -> customer) traffic. |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | edgeHeaderRewrite      | no       | The EDGE header rewrite actions to perform.                                                             |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | geoLimitRedirectURL    | no       | This is the URL Traffic Router will redirect to when Geo Limit Failure.                                 |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | geoLimit               | yes      | - 0: None - no limitations                                                                              |
-  |                        |          | - 1: Only route on CZF file hit                                                                         |
-  |                        |          | - 2: Only route on CZF hit or when from geo limit countries                                             |
-  |                        |          |                                                                                                         |
-  |                        |          | Note that this does not prevent access to content or makes content secure; it just prevents             |
-  |                        |          | routing to the content by Traffic Router.                                                               |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | geoLimitCountries      | no       | The geo limit countries.                                                                                |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | geoProvider            | yes      | - 0: Maxmind(default)                                                                                   |
-  |                        |          | - 1: Neustar                                                                                            |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | globalMaxMbps          | no       | The maximum global bandwidth allowed on this deliveryservice. If exceeded, the traffic routes to the    |
-  |                        |          | dnsByPassIp* for DNS deliveryservices and to the httpBypassFqdn for HTTP deliveryservices.              |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | globalMaxTps           | no       | The maximum global transactions per second allowed on this deliveryservice. When this is exceeded       |
-  |                        |          | traffic will be sent to the dnsByPassIp* for DNS deliveryservices and to the httpBypassFqdn for         |
-  |                        |          | HTTP deliveryservices                                                                                   |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | httpBypassFqdn         | no       | The HTTP destination to use for bypass on an HTTP deliveryservice - bypass starts when serving more     |
-  |                        |          | than the globalMaxMbps traffic on this deliveryservice.                                                 |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | infoUrl                | no       | Use this to add a URL that points to more information about that deliveryservice.                       |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | initialDispersion      | yes|no   | Initial dispersion. Required for HTTP* delivery services.                                               |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | ipv6RoutingEnabled     | yes|no   | false: send IPv4 address of Traffic Router to client on HTTP type del.                                  |
-  |                        |          | Required for DNS*, HTTP* and STEERING* delivery services.                                               |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | logsEnabled            | yes      | - false: No                                                                                             |
-  |                        |          | - true: Yes                                                                                             |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | longDesc               | no       | Description field.                                                                                      |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | longDesc1              | no       | Description field 1.                                                                                    |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | longDesc2              | no       | Description field 2.                                                                                    |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | maxDnsAnswers          | no       | The maximum number of IPs to put in a A/AAAA response for a DNS deliveryservice (0 means all            |
-  |                        |          | available).                                                                                             |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | midHeaderRewrite       | no       | The MID header rewrite actions to perform.                                                              |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | missLat                | yes|no   | The latitude as decimal degrees to use when the client cannot be found in the CZF or the Geo lookup.    |
-  |                        |          | e.g. 39.7391500 or null. Required for DNS* and HTTP* delivery services.                                 |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | missLong               | yes|no   | The longitude as decimal degrees to use when the client cannot be found in the CZF or the Geo lookup.   |
-  |                        |          | e.g. -104.9847000 or null. Required for DNS* and HTTP* delivery services.                               |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | multiSiteOrigin        | yes|no   | true if enabled, false if disabled. Required for DNS* and HTTP* delivery services.                      |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | orgServerFqdn          | yes|no   | The origin server base URL (FQDN when used in this instance, includes the                               |
-  |                        |          | protocol (http:// or https://) for use in retrieving content from the origin server. This field is      |
-  |                        |          | required if type is DNS* or HTTP*.                                                                      |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | originShield           | no       | Origin shield                                                                                           |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | profileId              | no       | DS profile ID                                                                                           |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | protocol               | yes|no   | - 0: serve with http:// at EDGE                                                                         |
-  |                        |          | - 1: serve with https:// at EDGE                                                                        |
-  |                        |          | - 2: serve with both http:// and https:// at EDGE                                                       |
-  |                        |          |                                                                                                         |
-  |                        |          | Required for DNS*, HTTP* or *STEERING* delivery services.                                               |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | qstringIgnore          | yes|no   | - 0: no special query string handling; it is for use in the cache-key and pass up to origin.            |
-  |                        |          | - 1: ignore query string in cache-key, but pass it up to parent and or origin.                          |
-  |                        |          | - 2: drop query string at edge, and do not use it in the cache-key.                                     |
-  |                        |          |                                                                                                         |
-  |                        |          | Required for DNS* and HTTP* delivery services.                                                          |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | rangeRequestHandling   | yes|no   | How to treat range requests (required for DNS* and HTTP* delivery services):                            |
-  |                        |          |                                                                                                         |
-  |                        |          | - 0 Do not cache (ranges requested from files taht are already cached due to a non range request will   |
-  |                        |          |   be a HIT)                                                                                             |
-  |                        |          | - 1 Use the background_fetch plugin.                                                                    |
-  |                        |          | - 2 Use the cache_range_requests plugin.                                                                |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | regexRemap             | no       | Regex Remap rule to apply to this delivery service at the Edge tier.                                    |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | regionalGeoBlocking    | yes      | Is the Regional Geo Blocking feature enabled.                                                           |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | remapText              | no       | Additional raw remap line text.                                                                         |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | routingName            | yes      | The routing name of this deliveryservice, e.g. <routingName>.<xmlId>.cdn.com.                           |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | signed                 | no       | - false: token based auth (see :ref:token-based-auth) is not enabled for this deliveryservice.          |
-  |                        |          | - true: token based auth is enabled for this deliveryservice.                                           |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | signingAlgorithm       | no       | - null: token based auth (see :ref:token-based-auth) is not enabled for this deliveryservice.           |
-  |                        |          | - "url_sig": URL Sign token based auth is enabled for this deliveryservice.                             |
-  |                        |          | - "uri_signing": URI Signing token based auth is enabled for this deliveryservice.                      |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | sslKeyVersion          | no       | SSL key version                                                                                         |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | tenantId               | No       | Owning tenant ID                                                                                        |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | trRequestHeaders       | no       | Traffic router log request headers                                                                      |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | trResponseHeaders      | no       | Traffic router additional response headers                                                              |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | typeId                 | yes      | The type of this deliveryservice (one of :ref:to-api-v12-types use_in_table='deliveryservice').         |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
-  | xmlId                  | yes      | Unique string that describes this deliveryservice. This value cannot be changed on update.              |
-  +------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | Parameter                | Required | Description                                                                                             |
+  +==========================+==========+=========================================================================================================+
+  | active                   | yes      | true if active, false if inactive.                                                                      |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | anonymousBlockingEnabled | no       | - true: enable blocking clients with anonymous ips                                                      |
+  |                          |          | - false: disabled                                                                                       |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | cacheurl                 | no       | Cache URL rule to apply to this delivery service.                                                       |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | ccrDnsTtl                | no       | The TTL of the DNS response for A or AAAA queries requesting the IP address of the tr.host.             |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | cdnId                    | yes      | cdn id                                                                                                  |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | checkPath                | no       | The path portion of the URL to check this deliveryservice for health.                                   |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | displayName              | yes      | Display name                                                                                            |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | dnsBypassCname           | no       | Bypass CNAME                                                                                            |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | dnsBypassIp              | no       | The IPv4 IP to use for bypass on a DNS deliveryservice - bypass starts when serving more than the       |
+  |                          |          | globalMaxMbps traffic on this deliveryservice.                                                          |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | dnsBypassIp6             | no       | The IPv6 IP to use for bypass on a DNS deliveryservice - bypass starts when serving more than the       |
+  |                          |          | globalMaxMbps traffic on this deliveryservice.                                                          |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | dnsBypassTtl             | no       | The TTL of the DNS bypass response.                                                                     |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | dscp                     | yes      | The Differentiated Services Code Point (DSCP) with which to mark downstream (EDGE -> customer) traffic. |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | edgeHeaderRewrite        | no       | The EDGE header rewrite actions to perform.                                                             |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | geoLimitRedirectURL      | no       | This is the URL Traffic Router will redirect to when Geo Limit Failure.                                 |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | geoLimit                 | yes      | - 0: None - no limitations                                                                              |
+  |                          |          | - 1: Only route on CZF file hit                                                                         |
+  |                          |          | - 2: Only route on CZF hit or when from geo limit countries                                             |
+  |                          |          |                                                                                                         |
+  |                          |          | Note that this does not prevent access to content or makes content secure; it just prevents             |
+  |                          |          | routing to the content by Traffic Router.                                                               |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | geoLimitCountries        | no       | The geo limit countries.                                                                                |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | geoProvider              | yes      | - 0: Maxmind(default)                                                                                   |
+  |                          |          | - 1: Neustar                                                                                            |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | globalMaxMbps            | no       | The maximum global bandwidth allowed on this deliveryservice. If exceeded, the traffic routes to the    |
+  |                          |          | dnsByPassIp* for DNS deliveryservices and to the httpBypassFqdn for HTTP deliveryservices.              |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | globalMaxTps             | no       | The maximum global transactions per second allowed on this deliveryservice. When this is exceeded       |
+  |                          |          | traffic will be sent to the dnsByPassIp* for DNS deliveryservices and to the httpBypassFqdn for         |
+  |                          |          | HTTP deliveryservices                                                                                   |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | httpBypassFqdn           | no       | The HTTP destination to use for bypass on an HTTP deliveryservice - bypass starts when serving more     |
+  |                          |          | than the globalMaxMbps traffic on this deliveryservice.                                                 |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | infoUrl                  | no       | Use this to add a URL that points to more information about that deliveryservice.                       |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | initialDispersion        | yes|no   | Initial dispersion. Required for HTTP* delivery services.                                               |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | ipv6RoutingEnabled       | yes|no   | false: send IPv4 address of Traffic Router to client on HTTP type del.                                  |
+  |                          |          | Required for DNS*, HTTP* and STEERING* delivery services.                                               |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | logsEnabled              | yes      | - false: No                                                                                             |
+  |                          |          | - true: Yes                                                                                             |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | longDesc                 | no       | Description field.                                                                                      |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | longDesc1                | no       | Description field 1.                                                                                    |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | longDesc2                | no       | Description field 2.                                                                                    |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | maxDnsAnswers            | no       | The maximum number of IPs to put in a A/AAAA response for a DNS deliveryservice (0 means all            |
+  |                          |          | available).                                                                                             |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | midHeaderRewrite         | no       | The MID header rewrite actions to perform.                                                              |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | missLat                  | yes|no   | The latitude as decimal degrees to use when the client cannot be found in the CZF or the Geo lookup.    |
+  |                          |          | e.g. 39.7391500 or null. Required for DNS* and HTTP* delivery services.                                 |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | missLong                 | yes|no   | The longitude as decimal degrees to use when the client cannot be found in the CZF or the Geo lookup.   |
+  |                          |          | e.g. -104.9847000 or null. Required for DNS* and HTTP* delivery services.                               |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | multiSiteOrigin          | yes|no   | true if enabled, false if disabled. Required for DNS* and HTTP* delivery services.                      |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | orgServerFqdn            | yes|no   | The origin server base URL (FQDN when used in this instance, includes the                               |
+  |                          |          | protocol (http:// or https://) for use in retrieving content from the origin server. This field is      |
+  |                          |          | required if type is DNS* or HTTP*.                                                                      |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | originShield             | no       | Origin shield                                                                                           |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | profileId                | no       | DS profile ID                                                                                           |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | protocol                 | yes|no   | - 0: serve with http:// at EDGE                                                                         |
+  |                          |          | - 1: serve with https:// at EDGE                                                                        |
+  |                          |          | - 2: serve with both http:// and https:// at EDGE                                                       |
+  |                          |          |                                                                                                         |
+  |                          |          | Required for DNS*, HTTP* or *STEERING* delivery services.                                               |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | qstringIgnore            | yes|no   | - 0: no special query string handling; it is for use in the cache-key and pass up to origin.            |
+  |                          |          | - 1: ignore query string in cache-key, but pass it up to parent and or origin.                          |
+  |                          |          | - 2: drop query string at edge, and do not use it in the cache-key.                                     |
+  |                          |          |                                                                                                         |
+  |                          |          | Required for DNS* and HTTP* delivery services.                                                          |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | rangeRequestHandling     | yes|no   | How to treat range requests (required for DNS* and HTTP* delivery services):                            |
+  |                          |          | - 0 Do not cache (ranges requested from files taht are already cached due to a non range request will   |
+  |                          |          | be a HIT)                                                                                               |
+  |                          |          | - 1 Use the background_fetch plugin.                                                                    |
+  |                          |          | - 2 Use the cache_range_requests plugin.                                                                |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | regexRemap               | no       | Regex Remap rule to apply to this delivery service at the Edge tier.                                    |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | regionalGeoBlocking      | yes      | Is the Regional Geo Blocking feature enabled.                                                           |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | remapText                | no       | Additional raw remap line text.                                                                         |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | routingName              | yes      | The routing name of this deliveryservice, e.g. <routingName>.<xmlId>.cdn.com.                           |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | signed                   | no       | - false: token based auth (see :ref:token-based-auth) is not enabled for this deliveryservice.          |
+  |                          |          | - true: token based auth is enabled for this deliveryservice.                                           |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | signingAlgorithm         | no       | - null: token based auth (see :ref:token-based-auth) is not enabled for this deliveryservice.           |
+  |                          |          | - "url_sig": URL Sign token based auth is enabled for this deliveryservice.                             |
+  |                          |          | - "uri_signing": URI Signing token based auth is enabled for this deliveryservice.                      |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | sslKeyVersion            | no       | SSL key version                                                                                         |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | tenantId                 | No       | Owning tenant ID                                                                                        |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | trRequestHeaders         | no       | Traffic router log request headers                                                                      |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | trResponseHeaders        | no       | Traffic router additional response headers                                                              |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | typeId                   | yes      | The type of this deliveryservice (one of :ref:to-api-v12-types use_in_table='deliveryservice').         |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
+  | xmlId                    | yes      | Unique string that describes this deliveryservice. This value cannot be changed on update.              |
+  +--------------------------+----------+---------------------------------------------------------------------------------------------------------+
 
 
   **Request Example** ::
@@ -2620,6 +2628,7 @@ URL Sig Keys
         "qstringIgnore": 0,
         "rangeRequestHandling": 0,
         "regionalGeoBlocking": false,
+        "anonymousBlockingEnabled": false,
         "signed": false,
         "signingAlgorithm": null
     }
@@ -2627,153 +2636,153 @@ URL Sig Keys
 
   **Response Properties**
 
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  |        Parameter         |  Type  |                                                             Description                                                              |
-  +==========================+========+======================================================================================================================================+
-  | ``active``               |  bool  | true if active, false if inactive.                                                                                                   |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``cacheurl``             | string | Cache URL rule to apply to this delivery service.                                                                                    |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``ccrDnsTtl``            |  int   | The TTL of the DNS response for A or AAAA queries requesting the IP address of the tr. host.                                         |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``cdnId``                |  int   | Id of the CDN to which the delivery service belongs to.                                                                              |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``cdnName``              | string | Name of the CDN to which the delivery service belongs to.                                                                            |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``checkPath``            | string | The path portion of the URL to check this deliveryservice for health.                                                                |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``displayName``          | string | The display name of the delivery service.                                                                                            |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``dnsBypassCname``       | string |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``dnsBypassIp``          | string | The IPv4 IP to use for bypass on a DNS deliveryservice  - bypass starts when serving more than the                                   |
-  |                          |        | globalMaxMbps traffic on this deliveryservice.                                                                                       |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``dnsBypassIp6``         | string | The IPv6 IP to use for bypass on a DNS deliveryservice - bypass starts when serving more than the                                    |
-  |                          |        | globalMaxMbps traffic on this deliveryservice.                                                                                       |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``dnsBypassTtl``         |  int   | The TTL of the DNS bypass response.                                                                                                  |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``dscp``                 |  int   | The Differentiated Services Code Point (DSCP) with which to mark downstream (EDGE ->  customer) traffic.                             |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``edgeHeaderRewrite``    | string | The EDGE header rewrite actions to perform.                                                                                          |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``exampleURLs``          | array  | Entry points into the CDN for this deliveryservice.                                                                                  |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``geoLimitRedirectUrl``  | string |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``geoLimit``             |  int   | - 0: None - no limitations                                                                                                           |
-  |                          |        | - 1: Only route on CZF file hit                                                                                                      |
-  |                          |        | - 2: Only route on CZF hit or when from USA                                                                                          |
-  |                          |        |                                                                                                                                      |
-  |                          |        | Note that this does not prevent access to content or makes content secure; it just prevents                                          |
-  |                          |        | routing to the content by Traffic Router.                                                                                            |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``geoLimitCountries``    | string |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``geoProvider``          |  int   |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``globalMaxMbps``        |  int   | The maximum global bandwidth allowed on this deliveryservice. If exceeded, the traffic routes to the                                 |
-  |                          |        | dnsByPassIp* for DNS deliveryservices and to the httpBypassFqdn for HTTP deliveryservices.                                           |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``globalMaxTps``         |  int   | The maximum global transactions per second allowed on this deliveryservice. When this is exceeded                                    |
-  |                          |        | traffic will be sent to the dnsByPassIp* for DNS deliveryservices and to the httpBypassFqdn for                                      |
-  |                          |        | HTTP deliveryservices                                                                                                                |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``httpBypassFqdn``       | string | The HTTP destination to use for bypass on an HTTP deliveryservice - bypass starts when serving more than the                         |
-  |                          |        | globalMaxMbps traffic on this deliveryservice.                                                                                       |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``id``                   |  int   | The deliveryservice id (database row number).                                                                                        |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``infoUrl``              | string | Use this to add a URL that points to more information about that deliveryservice.                                                    |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``initialDispersion``    |  int   |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``ipv6RoutingEnabled``   |  bool  | false: send IPv4 address of Traffic Router to client on HTTP type del.                                                               |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``lastUpdated``          | string |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``logsEnabled``          |  bool  |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``longDesc``             | string | Description field.                                                                                                                   |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``longDesc1``            | string | Description field 1.                                                                                                                 |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``longDesc2``            | string | Description field 2.                                                                                                                 |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``matchList``            | array  | Array of matchList hashes.                                                                                                           |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``>>type``               | string | The type of MatchList (one of :ref:to-api-v11-types use_in_table='regex').                                                           |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``>>setNumber``          | string | The set Number of the matchList.                                                                                                     |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``>>pattern``            | string | The regexp for the matchList.                                                                                                        |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``maxDnsAnswers``        |  int   | The maximum number of IPs to put in a A/AAAA response for a DNS deliveryservice (0 means all                                         |
-  |                          |        | available).                                                                                                                          |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``midHeaderRewrite``     | string | The MID header rewrite actions to perform.                                                                                           |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``missLat``              | float  | The latitude as decimal degrees to use when the client cannot be found in the CZF or the Geo lookup.                                 |
-  |                          |        |                                                                                                                                      |
-  |                          |        | - e.g. 39.7391500 or null                                                                                                            |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``missLong``             | float  | The longitude as decimal degrees to use when the client cannot be found in the CZF or the Geo lookup.                                |
-  |                          |        |                                                                                                                                      |
-  |                          |        | - e.g. -104.9847000 or null                                                                                                          |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``multiSiteOrigin``      |  bool  | Is the Multi Site Origin feature enabled for this delivery service (0=false, 1=true). See :ref:`rl-multi-site-origin`                |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``orgServerFqdn``        | string | The origin server base URL (FQDN when used in this instance, includes the                                                            |
-  |                          |        | protocol (http:// or https://) for use in retrieving content from the origin server.                                                 |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``originShield``         | string |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``profileDescription``   | string | The description of the Traffic Router Profile with which this deliveryservice is associated.                                         |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``profileId``            |  int   | The id of the Traffic Router Profile with which this deliveryservice is associated.                                                  |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``profileName``          | string | The name of the Traffic Router Profile with which this deliveryservice is associated.                                                |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``protocol``             |  int   | - 0: serve with http:// at EDGE                                                                                                      |
-  |                          |        | - 1: serve with https:// at EDGE                                                                                                     |
-  |                          |        | - 2: serve with both http:// and https:// at EDGE                                                                                    |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``qstringIgnore``        |  int   | - 0: no special query string handling; it is for use in the cache-key and pass up to origin.                                         |
-  |                          |        | - 1: ignore query string in cache-key, but pass it up to parent and or origin.                                                       |
-  |                          |        | - 2: drop query string at edge, and do not use it in the cache-key.                                                                  |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``rangeRequestHandling`` |  int   | How to treat range requests:                                                                                                         |
-  |                          |        |                                                                                                                                      |
-  |                          |        | - 0 Do not cache (ranges requested from files taht are already cached due to a non range request will be a HIT)                      |
-  |                          |        | - 1 Use the `background_fetch <https://docs.trafficserver.apache.org/en/latest/reference/plugins/background_fetch.en.html>`_ plugin. |
-  |                          |        | - 2 Use the cache_range_requests plugin.                                                                                             |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``regexRemap``           | string | Regex Remap rule to apply to this delivery service at the Edge tier.                                                                 |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``regionalGeoBlocking``  |  bool  | Regex Remap rule to apply to this delivery service at the Edge tier.                                                                 |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``remapText``            | string | Additional raw remap line text.                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``routingName``          | string | The routing name of this deliveryservice, e.g. <routingName>.<xmlId>.cdn.com.                                                        |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``signed``               |  bool  | - false: token based auth (see :ref:token-based-auth) is not enabled for this deliveryservice.                                       |
-  |                          |        | - true: token based auth is enabled for this deliveryservice.                                                                        |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``signingAlgorithm``     | string | - null: token based auth (see :ref:token-based-auth) is not enabled for this deliveryservice.                                        |
-  |                          |        | - "url_sig": URL Sign token based auth is enabled for this deliveryservice.                                                          |
-  |                          |        | - "uri_signing": URI Signing token based auth is enabled for this deliveryservice.                                                   |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``sslKeyVersion``        |  int   |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``trRequestHeaders``     | string |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``trResponseHeaders``    | string |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``typeId``               |  int   | The type of this deliveryservice (one of :ref:to-api-v11-types use_in_table='deliveryservice').                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``xmlId``                | string | Unique string that describes this deliveryservice.                                                                                   |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | Parameter                    | Type   | Description                                                                                                                          |
+  +==============================+========+======================================================================================================================================+
+  | ``active``                   | bool   | true if active, false if inactive.                                                                                                   |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``anonymousBlockingEnabled`` | bool   | - true: enable blocking clients with anonymous ips                                                                                   |
+  |                              |        | - false: disabled                                                                                                                    |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``cacheurl``                 | string | Cache URL rule to apply to this delivery service.                                                                                    |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``ccrDnsTtl``                | int    | The TTL of the DNS response for A or AAAA queries requesting the IP address of the tr. host.                                         |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``cdnId``                    | int    | Id of the CDN to which the delivery service belongs to.                                                                              |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``cdnName``                  | string | Name of the CDN to which the delivery service belongs to.                                                                            |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``checkPath``                | string | The path portion of the URL to check this deliveryservice for health.                                                                |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``displayName``              | string | The display name of the delivery service.                                                                                            |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``dnsBypassCname``           | string |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``dnsBypassIp``              | string | The IPv4 IP to use for bypass on a DNS deliveryservice  - bypass starts when serving more than the                                   |
+  |                              |        | globalMaxMbps traffic on this deliveryservice.                                                                                       |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``dnsBypassIp6``             | string | The IPv6 IP to use for bypass on a DNS deliveryservice - bypass starts when serving more than the                                    |
+  |                              |        | globalMaxMbps traffic on this deliveryservice.                                                                                       |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``dnsBypassTtl``             | int    | The TTL of the DNS bypass response.                                                                                                  |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``dscp``                     | int    | The Differentiated Services Code Point (DSCP) with which to mark downstream (EDGE ->  customer) traffic.                             |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``edgeHeaderRewrite``        | string | The EDGE header rewrite actions to perform.                                                                                          |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``exampleURLs``              | array  | Entry points into the CDN for this deliveryservice.                                                                                  |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``geoLimitRedirectUrl``      | string |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``geoLimit``                 | int    | - 0: None - no limitations                                                                                                           |
+  |                              |        | - 1: Only route on CZF file hit                                                                                                      |
+  |                              |        | - 2: Only route on CZF hit or when from USA                                                                                          |
+  |                              |        |                                                                                                                                      |
+  |                              |        | Note that this does not prevent access to content or makes content secure; it just prevents                                          |
+  |                              |        | routing to the content by Traffic Router.                                                                                            |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``geoLimitCountries``        | string |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``geoProvider``              | int    |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``globalMaxMbps``            | int    | The maximum global bandwidth allowed on this deliveryservice. If exceeded, the traffic routes to the                                 |
+  |                              |        | dnsByPassIp* for DNS deliveryservices and to the httpBypassFqdn for HTTP deliveryservices.                                           |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``globalMaxTps``             | int    | The maximum global transactions per second allowed on this deliveryservice. When this is exceeded                                    |
+  |                              |        | traffic will be sent to the dnsByPassIp* for DNS deliveryservices and to the httpBypassFqdn for                                      |
+  |                              |        | HTTP deliveryservices                                                                                                                |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``httpBypassFqdn``           | string | The HTTP destination to use for bypass on an HTTP deliveryservice - bypass starts when serving more than the                         |
+  |                              |        | globalMaxMbps traffic on this deliveryservice.                                                                                       |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``id``                       | int    | The deliveryservice id (database row number).                                                                                        |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``infoUrl``                  | string | Use this to add a URL that points to more information about that deliveryservice.                                                    |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``initialDispersion``        | int    |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``ipv6RoutingEnabled``       | bool   | false: send IPv4 address of Traffic Router to client on HTTP type del.                                                               |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``lastUpdated``              | string |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``logsEnabled``              | bool   |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``longDesc``                 | string | Description field.                                                                                                                   |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``longDesc1``                | string | Description field 1.                                                                                                                 |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``longDesc2``                | string | Description field 2.                                                                                                                 |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``matchList``                | array  | Array of matchList hashes.                                                                                                           |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``>>type``                   | string | The type of MatchList (one of :ref:to-api-v11-types use_in_table='regex').                                                           |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``>>setNumber``              | string | The set Number of the matchList.                                                                                                     |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``>>pattern``                | string | The regexp for the matchList.                                                                                                        |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``maxDnsAnswers``            | int    | The maximum number of IPs to put in a A/AAAA response for a DNS deliveryservice (0 means all                                         |
+  |                              |        | available).                                                                                                                          |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``midHeaderRewrite``         | string | The MID header rewrite actions to perform.                                                                                           |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``missLat``                  | float  | The latitude as decimal degrees to use when the client cannot be found in the CZF or the Geo lookup.                                 |
+  |                              |        | - e.g. 39.7391500 or null                                                                                                            |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``missLong``                 | float  | The longitude as decimal degrees to use when the client cannot be found in the CZF or the Geo lookup.                                |
+  |                              |        | - e.g. -104.9847000 or null                                                                                                          |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``multiSiteOrigin``          | bool   | Is the Multi Site Origin feature enabled for this delivery service (0=false, 1=true). See :ref:`rl-multi-site-origin`                |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``orgServerFqdn``            | string | The origin server base URL (FQDN when used in this instance, includes the                                                            |
+  |                              |        | protocol (http:// or https://) for use in retrieving content from the origin server.                                                 |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``originShield``             | string |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``profileDescription``       | string | The description of the Traffic Router Profile with which this deliveryservice is associated.                                         |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``profileId``                | int    | The id of the Traffic Router Profile with which this deliveryservice is associated.                                                  |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``profileName``              | string | The name of the Traffic Router Profile with which this deliveryservice is associated.                                                |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``protocol``                 | int    | - 0: serve with http:// at EDGE                                                                                                      |
+  |                              |        | - 1: serve with https:// at EDGE                                                                                                     |
+  |                              |        | - 2: serve with both http:// and https:// at EDGE                                                                                    |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``qstringIgnore``            | int    | - 0: no special query string handling; it is for use in the cache-key and pass up to origin.                                         |
+  |                              |        | - 1: ignore query string in cache-key, but pass it up to parent and or origin.                                                       |
+  |                              |        | - 2: drop query string at edge, and do not use it in the cache-key.                                                                  |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``rangeRequestHandling``     | int    | How to treat range requests:                                                                                                         |
+  |                              |        | - 0 Do not cache (ranges requested from files taht are already cached due to a non range request will be a HIT)                      |
+  |                              |        | - 1 Use the `background_fetch <https://docs.trafficserver.apache.org/en/latest/reference/plugins/background_fetch.en.html>`_ plugin. |
+  |                              |        | - 2 Use the cache_range_requests plugin.                                                                                             |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``regexRemap``               | string | Regex Remap rule to apply to this delivery service at the Edge tier.                                                                 |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``regionalGeoBlocking``      | bool   | Regex Remap rule to apply to this delivery service at the Edge tier.                                                                 |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``remapText``                | string | Additional raw remap line text.                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``routingName``              | string | The routing name of this deliveryservice, e.g. <routingName>.<xmlId>.cdn.com.                                                        |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``signed``                   | bool   | - false: token based auth (see :ref:token-based-auth) is not enabled for this deliveryservice.                                       |
+  |                              |        | - true: token based auth is enabled for this deliveryservice.                                                                        |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``signingAlgorithm``         | string | - null: token based auth (see :ref:token-based-auth) is not enabled for this deliveryservice.                                        |
+  |                              |        | - "url_sig": URL Sign token based auth is enabled for this deliveryservice.                                                          |
+  |                              |        | - "uri_signing": URI Signing token based auth is enabled for this deliveryservice.                                                   |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``sslKeyVersion``            | int    |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``trRequestHeaders``         | string |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``trResponseHeaders``        | string |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``typeId``                   | int    | The type of this deliveryservice (one of :ref:to-api-v11-types use_in_table='deliveryservice').                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``xmlId``                    | string | Unique string that describes this deliveryservice.                                                                                   |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
 
   **Response Example** ::
 
@@ -2781,6 +2790,7 @@ URL Sig Keys
       "response": [
         {
             "active": true,
+            "anonymousBlockingEnabled": false,
             "cacheurl": null,
             "ccrDnsTtl": "3600",
             "cdnId": "2",
@@ -2896,153 +2906,153 @@ URL Sig Keys
 
   **Response Properties**
 
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  |        Parameter         |  Type  |                                                             Description                                                              |
-  +==========================+========+======================================================================================================================================+
-  | ``active``               |  bool  | true if active, false if inactive.                                                                                                   |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``cacheurl``             | string | Cache URL rule to apply to this delivery service.                                                                                    |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``ccrDnsTtl``            |  int   | The TTL of the DNS response for A or AAAA queries requesting the IP address of the tr. host.                                         |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``cdnId``                |  int   | Id of the CDN to which the delivery service belongs to.                                                                              |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``cdnName``              | string | Name of the CDN to which the delivery service belongs to.                                                                            |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``checkPath``            | string | The path portion of the URL to check this deliveryservice for health.                                                                |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``displayName``          | string | The display name of the delivery service.                                                                                            |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``dnsBypassCname``       | string |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``dnsBypassIp``          | string | The IPv4 IP to use for bypass on a DNS deliveryservice  - bypass starts when serving more than the                                   |
-  |                          |        | globalMaxMbps traffic on this deliveryservice.                                                                                       |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``dnsBypassIp6``         | string | The IPv6 IP to use for bypass on a DNS deliveryservice - bypass starts when serving more than the                                    |
-  |                          |        | globalMaxMbps traffic on this deliveryservice.                                                                                       |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``dnsBypassTtl``         |  int   | The TTL of the DNS bypass response.                                                                                                  |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``dscp``                 |  int   | The Differentiated Services Code Point (DSCP) with which to mark downstream (EDGE ->  customer) traffic.                             |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``edgeHeaderRewrite``    | string | The EDGE header rewrite actions to perform.                                                                                          |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``exampleURLs``          | array  | Entry points into the CDN for this deliveryservice.                                                                                  |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``geoLimitRedirectUrl``  | string |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``geoLimit``             |  int   | - 0: None - no limitations                                                                                                           |
-  |                          |        | - 1: Only route on CZF file hit                                                                                                      |
-  |                          |        | - 2: Only route on CZF hit or when from USA                                                                                          |
-  |                          |        |                                                                                                                                      |
-  |                          |        | Note that this does not prevent access to content or makes content secure; it just prevents                                          |
-  |                          |        | routing to the content by Traffic Router.                                                                                            |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``geoLimitCountries``    | string |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``geoProvider``          |  int   |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``globalMaxMbps``        |  int   | The maximum global bandwidth allowed on this deliveryservice. If exceeded, the traffic routes to the                                 |
-  |                          |        | dnsByPassIp* for DNS deliveryservices and to the httpBypassFqdn for HTTP deliveryservices.                                           |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``globalMaxTps``         |  int   | The maximum global transactions per second allowed on this deliveryservice. When this is exceeded                                    |
-  |                          |        | traffic will be sent to the dnsByPassIp* for DNS deliveryservices and to the httpBypassFqdn for                                      |
-  |                          |        | HTTP deliveryservices                                                                                                                |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``httpBypassFqdn``       | string | The HTTP destination to use for bypass on an HTTP deliveryservice - bypass starts when serving more than the                         |
-  |                          |        | globalMaxMbps traffic on this deliveryservice.                                                                                       |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``id``                   |  int   | The deliveryservice id (database row number).                                                                                        |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``infoUrl``              | string | Use this to add a URL that points to more information about that deliveryservice.                                                    |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``initialDispersion``    |  int   |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``ipv6RoutingEnabled``   |  bool  | false: send IPv4 address of Traffic Router to client on HTTP type del.                                                               |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``lastUpdated``          | string |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``logsEnabled``          |  bool  |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``longDesc``             | string | Description field.                                                                                                                   |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``longDesc1``            | string | Description field 1.                                                                                                                 |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``longDesc2``            | string | Description field 2.                                                                                                                 |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``matchList``            | array  | Array of matchList hashes.                                                                                                           |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``>>type``               | string | The type of MatchList (one of :ref:to-api-v11-types use_in_table='regex').                                                           |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``>>setNumber``          | string | The set Number of the matchList.                                                                                                     |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``>>pattern``            | string | The regexp for the matchList.                                                                                                        |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``maxDnsAnswers``        |  int   | The maximum number of IPs to put in a A/AAAA response for a DNS deliveryservice (0 means all                                         |
-  |                          |        | available).                                                                                                                          |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``midHeaderRewrite``     | string | The MID header rewrite actions to perform.                                                                                           |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``missLat``              | float  | The latitude as decimal degrees to use when the client cannot be found in the CZF or the Geo lookup.                                 |
-  |                          |        |                                                                                                                                      |
-  |                          |        | - e.g. 39.7391500 or null                                                                                                            |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``missLong``             | float  | The longitude as decimal degrees to use when the client cannot be found in the CZF or the Geo lookup.                                |
-  |                          |        |                                                                                                                                      |
-  |                          |        | - e.g. -104.9847000 or null                                                                                                          |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``multiSiteOrigin``      |  bool  | Is the Multi Site Origin feature enabled for this delivery service (0=false, 1=true). See :ref:`rl-multi-site-origin`                |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``orgServerFqdn``        | string | The origin server base URL (FQDN when used in this instance, includes the                                                            |
-  |                          |        | protocol (http:// or https://) for use in retrieving content from the origin server.                                                 |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``originShield``         | string |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``profileDescription``   | string | The description of the Traffic Router Profile with which this deliveryservice is associated.                                         |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``profileId``            |  int   | The id of the Traffic Router Profile with which this deliveryservice is associated.                                                  |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``profileName``          | string | The name of the Traffic Router Profile with which this deliveryservice is associated.                                                |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``protocol``             |  int   | - 0: serve with http:// at EDGE                                                                                                      |
-  |                          |        | - 1: serve with https:// at EDGE                                                                                                     |
-  |                          |        | - 2: serve with both http:// and https:// at EDGE                                                                                    |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``qstringIgnore``        |  int   | - 0: no special query string handling; it is for use in the cache-key and pass up to origin.                                         |
-  |                          |        | - 1: ignore query string in cache-key, but pass it up to parent and or origin.                                                       |
-  |                          |        | - 2: drop query string at edge, and do not use it in the cache-key.                                                                  |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``rangeRequestHandling`` |  int   | How to treat range requests:                                                                                                         |
-  |                          |        |                                                                                                                                      |
-  |                          |        | - 0 Do not cache (ranges requested from files taht are already cached due to a non range request will be a HIT)                      |
-  |                          |        | - 1 Use the `background_fetch <https://docs.trafficserver.apache.org/en/latest/reference/plugins/background_fetch.en.html>`_ plugin. |
-  |                          |        | - 2 Use the cache_range_requests plugin.                                                                                             |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``regexRemap``           | string | Regex Remap rule to apply to this delivery service at the Edge tier.                                                                 |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``regionalGeoBlocking``  |  bool  | Regex Remap rule to apply to this delivery service at the Edge tier.                                                                 |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``remapText``            | string | Additional raw remap line text.                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``routingName``          | string | The routing name of this deliveryservice, e.g. <routingName>.<xmlId>.cdn.com.                                                        |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``signed``               |  bool  | - false: token based auth (see :ref:token-based-auth) is not enabled for this deliveryservice.                                       |
-  |                          |        | - true: token based auth is enabled for this deliveryservice.                                                                        |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``signingAlgorithm``     | string | - null: token based auth (see :ref:token-based-auth) is not enabled for this deliveryservice.                                        |
-  |                          |        | - "url_sig": URL Sign token based auth is enabled for this deliveryservice.                                                          |
-  |                          |        | - "uri_signing": URI Signing token based auth is enabled for this deliveryservice.                                                   |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``sslKeyVersion``        |  int   |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``trRequestHeaders``     | string |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``trResponseHeaders``    | string |                                                                                                                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``typeId``               |  int   | The type of this deliveryservice (one of :ref:to-api-v11-types use_in_table='deliveryservice').                                      |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
-  | ``xmlId``                | string | Unique string that describes this deliveryservice.                                                                                   |
-  +--------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | Parameter                    | Type   | Description                                                                                                                          |
+  +==============================+========+======================================================================================================================================+
+  | ``active``                   | bool   | true if active, false if inactive.                                                                                                   |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``anonymousBlockingEnabled`` | bool   | - true: enable blocking clients with anonymous ips                                                                                   |
+  |                              |        | - false: disabled                                                                                                                    |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``cacheurl``                 | string | Cache URL rule to apply to this delivery service.                                                                                    |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``ccrDnsTtl``                | int    | The TTL of the DNS response for A or AAAA queries requesting the IP address of the tr. host.                                         |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``cdnId``                    | int    | Id of the CDN to which the delivery service belongs to.                                                                              |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``cdnName``                  | string | Name of the CDN to which the delivery service belongs to.                                                                            |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``checkPath``                | string | The path portion of the URL to check this deliveryservice for health.                                                                |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``displayName``              | string | The display name of the delivery service.                                                                                            |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``dnsBypassCname``           | string |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``dnsBypassIp``              | string | The IPv4 IP to use for bypass on a DNS deliveryservice  - bypass starts when serving more than the                                   |
+  |                              |        | globalMaxMbps traffic on this deliveryservice.                                                                                       |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``dnsBypassIp6``             | string | The IPv6 IP to use for bypass on a DNS deliveryservice - bypass starts when serving more than the                                    |
+  |                              |        | globalMaxMbps traffic on this deliveryservice.                                                                                       |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``dnsBypassTtl``             | int    | The TTL of the DNS bypass response.                                                                                                  |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``dscp``                     | int    | The Differentiated Services Code Point (DSCP) with which to mark downstream (EDGE ->  customer) traffic.                             |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``edgeHeaderRewrite``        | string | The EDGE header rewrite actions to perform.                                                                                          |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``exampleURLs``              | array  | Entry points into the CDN for this deliveryservice.                                                                                  |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``geoLimitRedirectUrl``      | string |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``geoLimit``                 | int    | - 0: None - no limitations                                                                                                           |
+  |                              |        | - 1: Only route on CZF file hit                                                                                                      |
+  |                              |        | - 2: Only route on CZF hit or when from USA                                                                                          |
+  |                              |        |                                                                                                                                      |
+  |                              |        | Note that this does not prevent access to content or makes content secure; it just prevents                                          |
+  |                              |        | routing to the content by Traffic Router.                                                                                            |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``geoLimitCountries``        | string |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``geoProvider``              | int    |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``globalMaxMbps``            | int    | The maximum global bandwidth allowed on this deliveryservice. If exceeded, the traffic routes to the                                 |
+  |                              |        | dnsByPassIp* for DNS deliveryservices and to the httpBypassFqdn for HTTP deliveryservices.                                           |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``globalMaxTps``             | int    | The maximum global transactions per second allowed on this deliveryservice. When this is exceeded                                    |
+  |                              |        | traffic will be sent to the dnsByPassIp* for DNS deliveryservices and to the httpBypassFqdn for                                      |
+  |                              |        | HTTP deliveryservices                                                                                                                |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``httpBypassFqdn``           | string | The HTTP destination to use for bypass on an HTTP deliveryservice - bypass starts when serving more than the                         |
+  |                              |        | globalMaxMbps traffic on this deliveryservice.                                                                                       |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``id``                       | int    | The deliveryservice id (database row number).                                                                                        |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``infoUrl``                  | string | Use this to add a URL that points to more information about that deliveryservice.                                                    |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``initialDispersion``        | int    |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``ipv6RoutingEnabled``       | bool   | false: send IPv4 address of Traffic Router to client on HTTP type del.                                                               |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``lastUpdated``              | string |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``logsEnabled``              | bool   |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``longDesc``                 | string | Description field.                                                                                                                   |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``longDesc1``                | string | Description field 1.                                                                                                                 |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``longDesc2``                | string | Description field 2.                                                                                                                 |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``matchList``                | array  | Array of matchList hashes.                                                                                                           |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``>>type``                   | string | The type of MatchList (one of :ref:to-api-v11-types use_in_table='regex').                                                           |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``>>setNumber``              | string | The set Number of the matchList.                                                                                                     |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``>>pattern``                | string | The regexp for the matchList.                                                                                                        |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``maxDnsAnswers``            | int    | The maximum number of IPs to put in a A/AAAA response for a DNS deliveryservice (0 means all                                         |
+  |                              |        | available).                                                                                                                          |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``midHeaderRewrite``         | string | The MID header rewrite actions to perform.                                                                                           |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``missLat``                  | float  | The latitude as decimal degrees to use when the client cannot be found in the CZF or the Geo lookup.                                 |
+  |                              |        | - e.g. 39.7391500 or null                                                                                                            |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``missLong``                 | float  | The longitude as decimal degrees to use when the client cannot be found in the CZF or the Geo lookup.                                |
+  |                              |        | - e.g. -104.9847000 or null                                                                                                          |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``multiSiteOrigin``          | bool   | Is the Multi Site Origin feature enabled for this delivery service (0=false, 1=true). See :ref:`rl-multi-site-origin`                |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``orgServerFqdn``            | string | The origin server base URL (FQDN when used in this instance, includes the                                                            |
+  |                              |        | protocol (http:// or https://) for use in retrieving content from the origin server.                                                 |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``originShield``             | string |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``profileDescription``       | string | The description of the Traffic Router Profile with which this deliveryservice is associated.                                         |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``profileId``                | int    | The id of the Traffic Router Profile with which this deliveryservice is associated.                                                  |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``profileName``              | string | The name of the Traffic Router Profile with which this deliveryservice is associated.                                                |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``protocol``                 | int    | - 0: serve with http:// at EDGE                                                                                                      |
+  |                              |        | - 1: serve with https:// at EDGE                                                                                                     |
+  |                              |        | - 2: serve with both http:// and https:// at EDGE                                                                                    |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``qstringIgnore``            | int    | - 0: no special query string handling; it is for use in the cache-key and pass up to origin.                                         |
+  |                              |        | - 1: ignore query string in cache-key, but pass it up to parent and or origin.                                                       |
+  |                              |        | - 2: drop query string at edge, and do not use it in the cache-key.                                                                  |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``rangeRequestHandling``     | int    | How to treat range requests:                                                                                                         |
+  |                              |        | - 0 Do not cache (ranges requested from files taht are already cached due to a non range request will be a HIT)                      |
+  |                              |        | - 1 Use the `background_fetch <https://docs.trafficserver.apache.org/en/latest/reference/plugins/background_fetch.en.html>`_ plugin. |
+  |                              |        | - 2 Use the cache_range_requests plugin.                                                                                             |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``regexRemap``               | string | Regex Remap rule to apply to this delivery service at the Edge tier.                                                                 |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``regionalGeoBlocking``      | bool   | Regex Remap rule to apply to this delivery service at the Edge tier.                                                                 |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``remapText``                | string | Additional raw remap line text.                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``routingName``              | string | The routing name of this deliveryservice, e.g. <routingName>.<xmlId>.cdn.com.                                                        |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``signed``                   | bool   | - false: token based auth (see :ref:token-based-auth) is not enabled for this deliveryservice.                                       |
+  |                              |        | - true: token based auth is enabled for this deliveryservice.                                                                        |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``signingAlgorithm``         | string | - null: token based auth (see :ref:token-based-auth) is not enabled for this deliveryservice.                                        |
+  |                              |        | - "url_sig": URL Sign token based auth is enabled for this deliveryservice.                                                          |
+  |                              |        | - "uri_signing": URI Signing token based auth is enabled for this deliveryservice.                                                   |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``sslKeyVersion``            | int    |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``trRequestHeaders``         | string |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``trResponseHeaders``        | string |                                                                                                                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``typeId``                   | int    | The type of this deliveryservice (one of :ref:to-api-v11-types use_in_table='deliveryservice').                                      |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
+  | ``xmlId``                    | string | Unique string that describes this deliveryservice.                                                                                   |
+  +------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------+
 
   **Response Example** ::
 
@@ -3050,6 +3060,7 @@ URL Sig Keys
       "response": [
         {
             "active": true,
+            "anonymousBlockingEnabled": false,
             "cacheurl": null,
             "ccrDnsTtl": "3600",
             "cdnId": "2",
diff --git a/traffic_ops/app/db/migrations/20171211000000_add_anonymous_blocking.sql b/traffic_ops/app/db/migrations/20171211000000_add_anonymous_blocking.sql
new file mode 100644
index 000000000..4aab1708d
--- /dev/null
+++ b/traffic_ops/app/db/migrations/20171211000000_add_anonymous_blocking.sql
@@ -0,0 +1,19 @@
+/*
+  Licensed under the Apache License, Version 2.0 (the "License");
+  you may not use this file except in compliance with the License.
+  You may obtain a copy of the License at
+      http://www.apache.org/licenses/LICENSE-2.0
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+*/
+
+-- +goose Up
+-- SQL in section 'Up' is executed when this migration is applied
+alter table deliveryservice add column anonymous_blocking_enabled int default 0;
+
+-- +goose Down
+-- SQL section 'Down' is executed when this migration is rolled back
+alter table deliveryservice drop column anonymous_blocking_enabled;
diff --git a/traffic_ops/app/lib/API/Deliveryservice.pm b/traffic_ops/app/lib/API/Deliveryservice.pm
index 7241bd7d9..2ea23f1f1 100644
--- a/traffic_ops/app/lib/API/Deliveryservice.pm
+++ b/traffic_ops/app/lib/API/Deliveryservice.pm
@@ -101,6 +101,7 @@ sub index {
 		push(
 			@data, {
 				"active"               => \$row->active,
+				"anonymousBlockingEnabled" => $row->anonymous_blocking_enabled
 				"cacheurl"             => $row->cacheurl,
 				"ccrDnsTtl"            => $row->ccr_dns_ttl,
 				"cdnId"                => $row->cdn->id,
@@ -221,6 +222,7 @@ sub show {
 		push(
 			@data, {
 				"active"               => \$row->active,
+				"anonymousBlockingEnabled" => $row->anonymous_blocking_enabled,
 				"cacheurl"             => $row->cacheurl,
 				"ccrDnsTtl"            => $row->ccr_dns_ttl,
 				"cdnId"                => $row->cdn->id,
@@ -328,6 +330,7 @@ sub update {
 
 	my $values = {
 		active                 => $params->{active},
+		anonymous_blocking_enabled => $params->{anonymousBlockingEnabled},
 		cacheurl               => $params->{cacheurl},
 		ccr_dns_ttl            => $params->{ccrDnsTtl},
 		cdn_id                 => $params->{cdnId},
@@ -424,6 +427,7 @@ sub update {
 		push(
 			@response, {
 				"active"                   => $rs->active,
+				"anonymousBlockingEnabled" => $rs->anonymous_blocking_enabled,
 				"cacheurl"                 => $rs->cacheurl,
 				"ccrDnsTtl"                => $rs->ccr_dns_ttl,
 				"cdnId"                    => $rs->cdn->id,
@@ -555,6 +559,7 @@ sub safe_update {
 		push(
 			@response, {
 				"active"                   => $rs->active,
+				"anonymousBlockingEnabled" => $rs->anonymous_blocking_enabled,
 				"cacheurl"                 => $rs->cacheurl,
 				"ccrDnsTtl"                => $rs->ccr_dns_ttl,
 				"cdnId"                    => $rs->cdn->id,
@@ -662,6 +667,7 @@ sub create {
 
 	my $values = {
 		active                 => $params->{active},
+		anonymous_blocking_enabled => $params->{anonymousBlockingEnabled},
 		cacheurl               => $params->{cacheurl},
 		ccr_dns_ttl            => $params->{ccrDnsTtl},
 		cdn_id                 => $params->{cdnId},
@@ -769,6 +775,7 @@ sub create {
 		push(
 			@response, {
 				"active"                   => $insert->active,
+				"anonymousBlockingEnabled" => $insert->anonymous_blocking_enabled,
 				"cacheurl"                 => $insert->cacheurl,
 				"ccrDnsTtl"                => $insert->ccr_dns_ttl,
 				"cdnId"                    => $insert->cdn->id,
@@ -961,6 +968,7 @@ sub get_deliveryservices_by_serverId {
 			push(
 				@data, {
 					"active"               => \$row->active,
+					"anonymousBlockingEnabled" => $row->anonymous_blocking_enabled,
 					"cacheurl"             => $row->cacheurl,
 					"ccrDnsTtl"            => $row->ccr_dns_ttl,
 					"cdnId"                => $row->cdn->id,
@@ -1059,6 +1067,7 @@ sub get_deliveryservices_by_userId {
 			push(
 				@data, {
 					"active"               => \$row->active,
+					"anonymousBlockingEnabled" => $row->anonymous_blocking_enabled,
 					"cacheurl"             => $row->cacheurl,
 					"ccrDnsTtl"            => $row->ccr_dns_ttl,
 					"cdnId"                => $row->cdn->id,
diff --git a/traffic_ops/app/lib/Fixtures/Deliveryservice.pm b/traffic_ops/app/lib/Fixtures/Deliveryservice.pm
index 0ca854ca7..cba7871eb 100644
--- a/traffic_ops/app/lib/Fixtures/Deliveryservice.pm
+++ b/traffic_ops/app/lib/Fixtures/Deliveryservice.pm
@@ -56,6 +56,7 @@ my %definition_for = (
 			initial_dispersion    => 1,
 			regional_geo_blocking => 1,
 			logs_enabled          => 1,
+			anonymous_blocking_enabled => 1,
 		},
 	},
 	ds_cdn2 => {
@@ -95,6 +96,7 @@ my %definition_for = (
 			regional_geo_blocking => 0,
 			ipv6_routing_enabled  => 0,
 			logs_enabled          => 0,
+			anonymous_blocking_enabled => 0,
 		},
 	},
 	ds_cdn3 => {
@@ -134,6 +136,7 @@ my %definition_for = (
 			regional_geo_blocking => 0,
 			ipv6_routing_enabled  => 0,
 			logs_enabled          => 0,
+			anonymous_blocking_enabled => 0,
 		},
 	},
 	ds_cdn4 => {
@@ -173,6 +176,7 @@ my %definition_for = (
 			regional_geo_blocking => 0,
 			ipv6_routing_enabled  => 0,
 			logs_enabled          => 1,
+			anonymous_blocking_enabled => 0,
 		},
 	},
 	ds_dns => {
@@ -212,6 +216,7 @@ my %definition_for = (
 			regional_geo_blocking => 0,
 			ipv6_routing_enabled  => 0,
 			logs_enabled          => 0,
+			anonymous_blocking_enabled => 0,
 		},
 	},
 	ds_http_no_cache => {
@@ -251,6 +256,7 @@ my %definition_for = (
 			regional_geo_blocking => 0,
 			ipv6_routing_enabled  => 0,
 			logs_enabled          => 0,
+			anonymous_blocking_enabled => 0,
 		},
 	},
 	steering_ds1 => {
diff --git a/traffic_ops/app/lib/Schema/Result/DeliveryServiceInfoForDomainList.pm b/traffic_ops/app/lib/Schema/Result/DeliveryServiceInfoForDomainList.pm
index 29754741f..4575f1636 100644
--- a/traffic_ops/app/lib/Schema/Result/DeliveryServiceInfoForDomainList.pm
+++ b/traffic_ops/app/lib/Schema/Result/DeliveryServiceInfoForDomainList.pm
@@ -60,7 +60,8 @@ SELECT
     deliveryservice.cacheurl,
     deliveryservice.remap_text,
     deliveryservice.protocol,
-    deliveryservice.profile
+    deliveryservice.profile,
+    deliveryservice.anonymous_blocking_enabled
 FROM
     deliveryservice
     JOIN deliveryservice_regex ON deliveryservice_regex.deliveryservice = deliveryservice.id
@@ -104,6 +105,7 @@ __PACKAGE__->add_columns(
 	"range_request_handling",      { data_type => "tinyint", is_nullable => 0, size => 4 },
 	"origin_shield",               { data_type => "varchar", is_nullable => 0, size => 1024 },
 	"profile",                     { data_type => "integer", is_nullable => 1},
+    "anonymous_blocking_enabled",  { data_type => "tinyint", is_nullable => 1, size => 1 },
 );
 
 1;
diff --git a/traffic_ops/app/lib/Schema/Result/DeliveryServiceInfoForServerList.pm b/traffic_ops/app/lib/Schema/Result/DeliveryServiceInfoForServerList.pm
index 239cc093c..6f18fb451 100644
--- a/traffic_ops/app/lib/Schema/Result/DeliveryServiceInfoForServerList.pm
+++ b/traffic_ops/app/lib/Schema/Result/DeliveryServiceInfoForServerList.pm
@@ -60,7 +60,8 @@ SELECT
     deliveryservice.remap_text as remap_text,
     mid_header_rewrite as mid_header_rewrite,
     deliveryservice.protocol as protocol,
-    deliveryservice.profile as profile
+    deliveryservice.profile as profile,
+    deliveryservice.anonymous_blocking_enabled as anonymous_blocking_enabled
 FROM
     deliveryservice
         JOIN deliveryservice_regex ON deliveryservice_regex.deliveryservice = deliveryservice.id
@@ -97,6 +98,7 @@ __PACKAGE__->add_columns(
 	"range_request_handling",      { data_type => "tinyint", is_nullable => 0, size => 4 },
 	"origin_shield",               { data_type => "varchar", is_nullable => 0, size => 1024 },
 	"profile",                     { data_type => "integer", is_nullable => 1},
+    "anonymous_blocking_enabled",  { data_type => "tinyint", is_nullable => 1, size => 1 },
 );
 
 1;
diff --git a/traffic_ops/app/lib/Schema/Result/Deliveryservice.pm b/traffic_ops/app/lib/Schema/Result/Deliveryservice.pm
index f40cd87ea..872baa836 100644
--- a/traffic_ops/app/lib/Schema/Result/Deliveryservice.pm
+++ b/traffic_ops/app/lib/Schema/Result/Deliveryservice.pm
@@ -41,6 +41,11 @@ __PACKAGE__->table("deliveryservice");
   default_value: false
   is_nullable: 0
 
+=head2 anonymous_blocking_enabled
+  data_type: 'integer'
+  default_value: 0
+  is_nullable: 1
+
 =head2 dscp
 
   data_type: 'bigint'
@@ -314,6 +319,8 @@ __PACKAGE__->add_columns(
   { data_type => "text", is_nullable => 0 },
   "active",
   { data_type => "boolean", default_value => \"false", is_nullable => 0 },
+  "anonymous_blocking_enabled",
+  { data_type => "integer", default_value => 0, is_nullable => 1 },
   "dscp",
   { data_type => "bigint", is_nullable => 0 },
   "signing_algorithm",
diff --git a/traffic_ops/app/lib/UI/DeliveryService.pm b/traffic_ops/app/lib/UI/DeliveryService.pm
index c9fac4375..04a4ad3d5 100644
--- a/traffic_ops/app/lib/UI/DeliveryService.pm
+++ b/traffic_ops/app/lib/UI/DeliveryService.pm
@@ -255,6 +255,7 @@ sub read {
 				"initial_dispersion"          => $row->initial_dispersion,
 				"regional_geo_blocking"       => $row->regional_geo_blocking,
 				"logs_enabled"                => \$row->logs_enabled,
+				"anonymous_blocking_enabled"  => $row->anonymous_blocking_enabled,
 			}
 		);
 	}
@@ -835,6 +836,7 @@ sub update {
 			remap_text         => $self->paramAsScalar( 'ds.remap_text',         undef ),
 			initial_dispersion => $self->paramAsScalar( 'ds.initial_dispersion', 1 ),
 			logs_enabled       => $self->paramAsScalar('ds.logs_enabled'),
+			anonymous_blocking_enabled => $self->paramAsScalar('ds.anonymous_blocking_enabled'),
 		);
 
 		my $typename = $self->typename();
@@ -1073,6 +1075,7 @@ sub create {
 				initial_dispersion => $self->paramAsScalar( 'ds.initial_dispersion', 1 ),
 				logs_enabled       => $self->paramAsScalar('ds.logs_enabled'),
 				tenant_id => $tenant_id,
+				anonymous_blocking_enabled => $self->paramAsScalar('ds.anonymous_blocking_enabled'),
 		};
 
 		my $insert = $self->db->resultset('Deliveryservice')->create($new_ds);
diff --git a/traffic_ops/app/lib/UI/Topology.pm b/traffic_ops/app/lib/UI/Topology.pm
index 85fd4c65d..ada57c618 100644
--- a/traffic_ops/app/lib/UI/Topology.pm
+++ b/traffic_ops/app/lib/UI/Topology.pm
@@ -528,6 +528,8 @@ sub gen_crconfig_json {
         $data_obj->{'deliveryServices'}->{ $row->xml_id }->{'soa'}->{'admin'}   = $cdn_soa_admin;
         $data_obj->{'deliveryServices'}->{ $row->xml_id }->{'ip6RoutingEnabled'} = $row->ipv6_routing_enabled ? 'true' : 'false';
 
+        $data_obj->{'deliveryServices'}->{ $row->xml_id }->{'anonymousBlockingEnabled'} = $row->anonymous_blocking_enabled ? 'true' : 'false';
+
     }
 
     my $rs_dns = $self->db->resultset('Staticdnsentry')->search(
diff --git a/traffic_ops/app/t/api/1.2/deliveryservice.t b/traffic_ops/app/t/api/1.2/deliveryservice.t
index f3d068438..2f7b0d140 100644
--- a/traffic_ops/app/t/api/1.2/deliveryservice.t
+++ b/traffic_ops/app/t/api/1.2/deliveryservice.t
@@ -162,6 +162,7 @@ ok $t->get_ok("/api/1.2/deliveryservices?logsEnabled=true")->status_is(200)->or(
 				"typeId" => 36,
 				"tenantId" => $tenant_id,
 				"xmlId" => "ds_http",
+				"anonymousBlockingEnabled" => 1,
 			})->status_is(200)->or( sub { diag $t->tx->res->content->asset->{content}; } )
 			->json_is( "/response/0/active" => 0)
 			->json_is( "/response/0/tenantId" => $tenant_id)
@@ -173,6 +174,7 @@ ok $t->get_ok("/api/1.2/deliveryservices?logsEnabled=true")->status_is(200)->or(
 			->json_is( "/response/0/orgServerFqdn" => "http://10.75.168.91")
 			->json_is( "/response/0/protocol" => 1)
 			->json_is( "/response/0/type" => "HTTP")
+			->json_is( "/response/0/anonymousBlockingEnabled" => 1)
 		, 'Is the HTTP delivery service created?';
 
 	ok $t->post_ok('/api/1.2/deliveryservices' => {Accept => 'application/json'} => json => {
diff --git a/traffic_ops/app/t/deliveryservice.t b/traffic_ops/app/t/deliveryservice.t
index e580d2c43..1f0a44c18 100644
--- a/traffic_ops/app/t/deliveryservice.t
+++ b/traffic_ops/app/t/deliveryservice.t
@@ -98,6 +98,7 @@ ok $t->post_ok(
 		'ds.display_name'                => 'display name 1',
 		'ds.regional_geo_blocking'       => '1',
 		'ds.geolimit_redirect_url'       => '',
+		'ds.anonymous_blocking_enabled'  => '0',
 	}
 )->status_is(302), "create HTTP delivery service";
 my $t1_id = &get_ds_id('tst_xml_id_1');
@@ -149,6 +150,7 @@ ok $t->post_ok(
 		'ds.display_name'                => 'display name 2',
 		'ds.regional_geo_blocking'       => '0',
 		'ds.geolimit_redirect_url'       => '',
+		'ds.anonymous_blocking_enabled'  => '1',
 	}
 )->status_is(302), "create DNS DeliveryService";
 $t2_id = &get_ds_id('tst_xml_id_2');
@@ -203,6 +205,7 @@ ok $t->post_ok(
 		'ds.display_name'                => 'display name 3',
 		'ds.regional_geo_blocking'       => '0',
 		'ds.geolimit_redirect_url'       => 'http://knutsel3.com',
+		'ds.anonymous_blocking_enabled'  => '0',
 	}
 )->status_is(302), "create HTTP_NO_CACHE deliveryservice";
 
@@ -227,7 +230,9 @@ ok $t->get_ok('/datadeliveryservice')->
 	->json_is( '/0/display_name' => 'display name 1' )
 	->json_is( '/0/regional_geo_blocking' => '1' )
 	->json_is( '/0/regional_geo_blocking' => '1' )
-	->json_is( '/1/regional_geo_blocking' => '0' ),
+	->json_is( '/1/regional_geo_blocking' => '0' )
+	->json_is( '/0/anonymous_blocking_enabled' => '0' )
+	->json_is( '/1/anonymous_blocking_enabled' => '1' ),
 	"validate delivery services were created";
 
 $t2_id = &get_ds_id('tst_xml_id_2');
diff --git a/traffic_ops/app/templates/delivery_service/_form.html.ep b/traffic_ops/app/templates/delivery_service/_form.html.ep
index 36cff33d0..e38f3bdb9 100644
--- a/traffic_ops/app/templates/delivery_service/_form.html.ep
+++ b/traffic_ops/app/templates/delivery_service/_form.html.ep
@@ -587,6 +587,21 @@
 			<% } %>
         <% } %>
 	</div>
+	<div class="block form-row" id='anonymous_blocking_enabled_row'>
+		<% unless (field('ds.anonymous_blocking_enabled')->valid) { %>
+			<span class="field-with-error"><%= field('ds.anonymous_blocking_enabled')->error %></span>
+		<% } %>
+		%= label_for 'anonymous_blocking_enabled' => 'Anonymous Blocking', class => 'label'
+		<% if ($priv_level >= 20) { %>
+			%= field('ds.anonymous_blocking_enabled')->select([ [Disabled => 0], [Enabled => 1]]);
+		<% } else { %>
+			<% if ($ds->anonymous_blocking_enabled == 0) { %>
+				%= field('ds.anonymous_blocking_enabled')->text(class => 'field', value =>  'Disabled', readonly => 'readonly');
+			<% } else { %>
+				%= field('ds.anonymous_blocking_enabled')->text(class => 'field', value =>  'Enabled', readonly => 'readonly');
+			<% } %>
+		<% } %>
+  </div>
 	<div class="block form-row" id="active_row">
 		<% unless (field('ds.active')->valid) { %>
 			<span class="field-with-error"><%= field('ds.active')->error %></span>
diff --git a/traffic_ops/app/templates/delivery_service/add.html.ep b/traffic_ops/app/templates/delivery_service/add.html.ep
index a04c525c4..9429d6538 100644
--- a/traffic_ops/app/templates/delivery_service/add.html.ep
+++ b/traffic_ops/app/templates/delivery_service/add.html.ep
@@ -141,6 +141,7 @@
             $('#regexp_add').show(speed);
             $('#geo_limit_countries_row').show(speed);
             check_geolimit_redirect_url_row_showhide(1, speed);
+            $('#anonymous_blocking_enabled_row').show(speed);
 		}
 		else if (type_selected.match(/^DNS/)) {
 			$("#regexp_selector :nth-child(3)").attr('disabled','disabled');
@@ -182,6 +183,7 @@
             $('#regexp_add').show(speed);
             $('#geo_limit_countries_row').show(speed);
             check_geolimit_redirect_url_row_showhide(0, speed);
+            $('#anonymous_blocking_enabled_row').show(speed);
 		}
 		else if (type_selected.match(/^ANY_MAP$/)) {
             $('#protocoli_row').hide(speed);
@@ -220,6 +222,7 @@
             $('#remap_text_row').show(speed);
             $('#regexp_add').show(speed);
             $('#geo_limit_countries_row').show(speed);
+            $('#anonymous_blocking_enabled_row').hide(speed);
 		}
 		else if (type_selected.match(/STEERING$/)) {
             $('#protocoli_row').show(speed);
@@ -260,6 +263,7 @@
             $('#regexp_add').hide(speed);
             $('#geo_limit_countries_row').show(speed);
             check_geolimit_redirect_url_row_showhide(0, speed);
+            $('#anonymous_blocking_enabled_row').hide(speed);
 		}
 		//
 	}
diff --git a/traffic_ops/app/templates/delivery_service/edit.html.ep b/traffic_ops/app/templates/delivery_service/edit.html.ep
index 4de087550..9fbbfffff 100644
--- a/traffic_ops/app/templates/delivery_service/edit.html.ep
+++ b/traffic_ops/app/templates/delivery_service/edit.html.ep
@@ -234,6 +234,7 @@ function setup_form(speed) {
             $('#regexp_add').show(speed);
             $('#steering_button').hide(speed);
 	    check_geolimit_redirect_url_row_showhide(1, speed);
+            $('#anonymous_blocking_enabled_row').show(speed);
 		}
 		else if (type_selected.match(/^DNS/)) {
 			$("#regexp_selector :nth-child(3)").attr('disabled','disabled');
@@ -274,6 +275,7 @@ function setup_form(speed) {
             $('#regexp_add').show(speed);
             $('#steering_button').hide(speed);
 	    $('#geolimit_redirect_url_row').hide(speed);
+            $('#anonymous_blocking_enabled_row').show(speed);
 		}
 		else if (type_selected.match(/^ANY_MAP$/)) {
             $('#protocoli_row').hide(speed);
@@ -312,6 +314,7 @@ function setup_form(speed) {
             $('#regional_geo_blocking_row').show(speed);
             $('#regexp_add').show(speed);
             $('#steering_button').hide(speed);
+            $('#anonymous_blocking_enabled_row').hide(speed);
 		}
 		else if (type_selected.match(/STEERING$/)) {
             $('#protocoli_row').show(speed);
@@ -354,6 +357,7 @@ function setup_form(speed) {
             $('#server_assignment_button').hide(speed);
             $('#steering_button').show(speed);
             $('#geo_limit_countries_row').show(speed);
+            $('#anonymous_blocking_enabled_row').hide(speed);
 		}
 		//
 	}


 

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services