Unable to disable IPv4 for proxy network

Website, Application, Performance DNS & Network
1

What is the name of the domain?

9plat.uk

What is the issue you’re encountering

Cannot build an IPv6-only website for both server and user

What feature, service or problem is this related to?

DNS records

What are the steps to reproduce the issue?

Create an AAAA record with proxy
Waiting for effect
dig the DNS records of the domain
Found 4 IP addresses containing 2 IPv4 and 2 IPv6
I cannot disable IPv4 addresses from Cloudflare dashboard

2

There is no option to disable IPv4 addresses for proxied records on Cloudflare. If you want your site to be available as IPv6 only then you will either have to…

  • set the AAAA records in your Cloudflare DNS to “DNS only” (ensuring there are no A records set)

or

  • create a WAF rule to block if the source IP address is not in 2000::/3 - Cloudflare will publish an IPv4 address for your host, but will deliver a block page if anyone requests it. Or you could redirect it based on this…
    Proxy only IPv4 not IPv6

IPv6 can be disabled. For Enterprise zones in the dashboard, for other zones using the API.

2 Likes
3

This seems to be an implementation oversight in the Cloudflare UI - separate proxy settings for IPv6 and IPv4 should already be possible under the hood, we just don’t have access to this via the dashboard.

4

I did a cursory check of the Cloudflare documentation and there is no mention of turning off IPv4 anywhere. Setting up IP address rules seems to be the best solution for now.

5

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.