You can control access to the bwctl server via the file /etc/bwctld/bwctld.limits.
By default, the perfSONAR toolkit allows access from anywhere, and limits TCP tests to 30 seconds, and UDP tests to 900Mbps and 30 seconds.
ESnet generates a nighly update of bwctld.limits that allows testing from all Research and Education networks around the world, and nothing else.