Add an IP or prefix to the allowlist

To add an IP address or prefix to the Advanced DDoS Protection allowlist:

1. Log in to the Cloudflare dashboard ↗ and select your account.
2. Go to L3/4 DDoS > Advanced Protection.
3. Under General settings > Allowlist, select Edit.
4. Enter a prefix and (optionally) a description in Prefix and Description, respectively.
5. To exclude the current prefix from the allowlist instead of including it, uncheck the Enabled checkbox.
6. Select Add.

Important

Prefixes in the allowlist will be vulnerable to IP spoofing attacks. If an attacker can guess the source IP addresses you have allowlisted, their packets will be allowlisted.

Was this helpful?

What did you like?

Accurate

Easy to understand

Solved my problem

Helped me decide to use the product

Other

What went wrong?

Hard to understand

Incorrect information

Missing the information

Other

Thank you for helping improve Cloudflare's documentation!