The only requirement for a location is its name. All other fields are optional if the location you are sending requests from is only using IPv6 or sending all DNS requests using DNS over HTTPS.
Gateway uses the public source IPv4 address of your network to identify your location, apply policies and log the DNS requests. When you go through onboarding or in our location tab, the dashboard automatically identifies the public source IP address.
If you are using Gateway's paid plans, you can manually enter the IP address and netmask of your location. You can find out what public IP address you are using by connecting to the network of the location and then googling “What’s my IP address”.
On your router or if you are using a device or a daemon, forward DNS queries to the following IP addresses:
When you create a location, your location will receive a unique IPv6 address. Cloudflare Gateway will identify your location based on this unique IPv6 address.
On your router/device/forwarder/daemon forward DNS queries to the corresponding IPv6 address for the location.
DNS over HTTPS
Each location has a unique hostname for DNS over HTTPS.
Cloudflare Gateway will identify your location based on the DNS over HTTPS hostname.
Editable IP addresses
When users on the Enterprise plan have the option of manually entering one or more IP addresses of their choice. This enables them to protect networks even if they're not connecting from any of those networks' IP addresses when creating the location on the Teams dashboard.