Using Cloudflare

If you secure your website or server service using Cloudflare Reverse Proxy, we provide special dynamic firewall groups to ensure that the traffic actually originates from Cloudflare.

The following two dynamic firewall rules are available for this purpose:

• Cloudflare IPv4 (TCP and UDP)
• Cloudflare IPv6 (TCP and UDP)

Sample Configuration

Make sure that the two dynamic firewall rules are created before the deny rule. In this example, all traffic that is not routed through Cloudflare is denied.

More information on firewall rule types →