How to filter the access to the realm master by ip?

Hello, is it possible to limit the access of some routes of keycloak by a filter by ip ?
Example : /auth/
/auth/admin/master/*

To be accessible only by vpn for example?
If yes, what is the procedure ?