Add an IP or prefix to the allowlist

To add an IP address or prefix to the Advanced DDoS Protection allowlist:

1. In the Cloudflare dashboard, go to the L3/4 DDoS protection page.

   Go to DDoS Managed Rules

2. Go to Advanced Protection.

3. Under General settings > Allowlist, select Edit.

4. Enter a prefix and (optionally) a description in Prefix and Description, respectively.

5. To exclude the current prefix from the allowlist instead of including it, uncheck the Enabled checkbox. 6. Select Add.

Allowlists support approximately 200 IP addresses in a single expression for a rule.

Important

Prefixes in the allowlist will be vulnerable to IP spoofing attacks. If an attacker can guess the source IP addresses you have allowlisted, their packets will be allowlisted.