I’m considering having Workers access a database instance hosted somewhere else, but I want to restrict the access to that database to the IPs of Workers. Are the Worker IPs always in the ranges mentioned at https://www.cloudflare.com/ips/ , and can I be absolutely sure that a new CDN edge location doesn’t pop up that uses different IPs that the ones mentioned on that page?
Actually Workers traffic does not even come from Cloudflare ASN 13335 based on my testing. It’s using Google ASN IP addresses.
Yes, they should all come from IPs on that page. Workers run in every PoP. So, you will be getting those IPs.
I assume you tested this on Preview. The Preview does run in GCP but deployments are to CFs infra
This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.