GeoIP Whitelist iRule

Assuming you have your data group called 'allowed_country' and it's populated with countries you wish to allow access to, then this iRule should work for you:

when CLIENT_ACCEPTED {
 if { ! [class match -value [whereis [IP::client_addr] country] equals allowed_country] } {
  reject
 }
}