Locking down the reverse proxy

We are about to get hit by Amazon’s "IPv4 tax"1 that starts in February.

One solution is to start switching on the reverse-proxy on our existing Cloudflare DNS entries.

For our customers that want a locked-down “allowlisting” experience does Cloudflares use a specific ipv6 range that our machines can allowlist and also can Cloudflares proxies be locked to specific incoming address ranges?

1 Cloudflare blog “amazon-2bn-ipv4-tax-how-avoid-paying”

Yes, IP addresses are here…

Enterprise customers can pay for for static IP addressing or BYOIP, but otherwise, no (apart from a comment here about using custom SSL certificates to reduce the range for Enterprise and Business, but I don’t know details of that)…

1 Like

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.