Geo IP is not a great way to do this. Imagine if a free wifi hotspot called "Slack Guest Wifi" suddenly shows up within range of the Slack office in SF and routes all traffic via VPN to Iran, presumably Slack guests and employees will be banned from their own product.