I once had to implement a giant ip address blacklist for an api in the fastest and cheapest way possible. Openresty and redis saved me that day. That has been my favorite project that I've ever worked on. Two amazing pieces of software. Kong is great, too. We were just unable to use it because its blacklist feature wasn't easy to implement.