Cloudflare publishes 22 IP ranges.
Short answer
Cloudflare publishes the IPv4 and IPv6 ranges its edge network uses. A site behind Cloudflare receives every visitor’s request from one of these addresses.
What it’s for
Use it to accept traffic only from Cloudflare at your origin server, and to restore visitor addresses from the CF-Connecting-IP header. Cloudflare’s WARP app also exits from Cloudflare’s network.
Prefixes
What changed
No prefixes added or removed since we started tracking this list. Changes appear here the day after the provider publishes them.
Allowlist formats
nginx (first 5 prefixes)
allow 103.21.244.0/22; allow 103.22.200.0/22; allow 103.31.4.0/22; allow 104.16.0.0/13; allow 104.24.0.0/14; deny all;
iptables (first 5 prefixes)
iptables -A INPUT -s 103.21.244.0/22 -j ACCEPT iptables -A INPUT -s 103.22.200.0/22 -j ACCEPT iptables -A INPUT -s 103.31.4.0/22 -j ACCEPT iptables -A INPUT -s 104.16.0.0/13 -j ACCEPT iptables -A INPUT -s 104.24.0.0/14 -j ACCEPT
Generate the full list from the CSV, and refresh it on a schedule: providers add and retire prefixes often.
Sources
- Cloudflare: published IP ranges · checked 6 Nov 2026
- Cloudflare documentation