An unusual IP returned after enabling Cloudflare Proxy/CDN

What is the name of the domain?

ciao.su

What is the issue you’re encountering

I’ve encountered a perplexing issue recently while using Cloudflare’s Proxy (CDN) feature for my domain. Regardless of whether my domain is linked to Cloudflare Workers, Pages, a Cloudflare Tunnel, or a standard A record pointing to another server, when I ping the domain, the IP address returned consistently appears in the format of xxx.xxx.xxx.1, such as 104.21.96.1, 104.21.32.1, etc. I’ve done some research and understand that when Cloudflare’s Proxy is enabled, traffic is routed through its edge nodes, and these 104.21.x.1 type IP addresses are indeed within Cloudflare’s IP ranges. However, an IP pattern like xxx.xxx.xxx.1 typically denotes a gateway address or network address in networking contexts, making its use as a public service entry IP somewhat unusual.

What feature, service or problem is this related to?

DNS records

What are the steps to reproduce the issue?

Hopefully it will be assigned a normal ip. Can Cloudflare officials explain what’s going on?

Screenshot of the error

Those are completely normal Cloudflare proxy IPs.

1 Like

A .1 is often a gateway IP when a network is a class C, such as a home router. Cloudflare’s IP ranges tend to be much larger than a /24.

This isn’t normal, usual projects don’t get assigned these IPs.
And all of these IPs for .1 have been blocked by some carriers in mainland China.

Would you mind sharing the official documentation where this is stated?

Wow, that sucks. You might want to contact them and ask if they could instead block all addresses ending in .13 as that would be more convenient for you.

1 Like

我不清楚为什么会分配这些IP给我。我的一些朋友也遇到相同的情况
I am not sure why these IPs are assigned to me. Some of my friends are experiencing the same situation

Even the Pages projects I created that are created are assigned an IP of xxx.1. e.g. libredomains.pages.dev

China telecoms block millions of websites. It is far more likely these are being blocked as the IP is shared by something the Chinese government is censoring than because the IP address ends in in a .1 address.

Cloudflare isn’t going to rotate IPs to try and evade governmental censorship. It’s unfortunate that Chinese ISPs block based on destination IP, it has a lot of collateral damage.

No, CF’s other IPs that don’t end in .1 can be accessed normally.
All three major carriers in China basically block cloudflare IPs that end in .1.

However, my another .org domain doesn’t have this problem

Welp if they’re not doing it for censorship purposes they’ve screwed up their network routing. You should contact them and point out their error. There’s absolutely no reason they shouldn’t route traffic to a gateway address. That’s what gateways are for after all!

I think there is an error on Cloudflare’s side. Or deliberately assigning such IPs to some users/projects.

You are certainly welcome to open a support ticket if you believe it’s an error, but the community has no control over IP address allocation/assignment.

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.