After spending few sleepless nights found a workaround to do multi IP whitelisting and throttling on API manager as following. Multi IP whitelisting and throttling is not supported by wso2 API manager pack. There are two options we have tried, 1. IP based Throttling Go to API manager admin portal https://13.58.109.76:9444/admin/api-policy-list throttling policies > advanced throttling > add tier Set Request Count as the default limit Set 1 minute as unit time Press on add condition group > press IP condition > press "on" on IP Condition Policy Select specific IP as IP Condition type Add an IP address to be whitelisted and throttled Under Execution Policy Select Request Count as Request Count Set Request Count as you like Set time to 1 minute Press on add condition group again to add the second IP and repeat the same Add this to the API by setting it on "Advanced Throttling Policies" on API manage page on publisher page. Pro