I use PfSense with PFblockerNG. I created custom lists of differnt ASN's with a few tweaks here and there. It breaks a few things out there but as far as I'm concerned they can all pound sand. If a site breaks because of some integration with tech giants than it isn't anything I have to have.