35 lines
910 B
Plaintext
35 lines
910 B
Plaintext
# Cloudflare edge ranges — peers allowed to set CF-Connecting-IP / X-Real-IP /
|
|
# X-Forwarded-For. Referenced by templates/hap_listener.tpl:
|
|
# acl from_trusted_proxy src -f /etc/haproxy/cloudflare_ips.list -f /etc/haproxy/trusted_proxies.list
|
|
#
|
|
# PUBLIC DATA — safe to commit. Source: https://www.cloudflare.com/ips-v4
|
|
# and https://www.cloudflare.com/ips-v6. Keep in sync with the IPv4 snapshot in
|
|
# WHP's ssl_renewal_orchestrator.php::isCloudflareIP() (that one is IPv4-only).
|
|
# Refresh at release time; Cloudflare has not added a range since 2021.
|
|
#
|
|
# IPv4
|
|
173.245.48.0/20
|
|
103.21.244.0/22
|
|
103.22.200.0/22
|
|
103.31.4.0/22
|
|
141.101.64.0/18
|
|
108.162.192.0/18
|
|
190.93.240.0/20
|
|
188.114.96.0/20
|
|
197.234.240.0/22
|
|
198.41.128.0/17
|
|
162.158.0.0/15
|
|
104.16.0.0/13
|
|
104.24.0.0/14
|
|
172.64.0.0/13
|
|
131.0.72.0/22
|
|
#
|
|
# IPv6
|
|
2400:cb00::/32
|
|
2606:4700::/32
|
|
2803:f800::/32
|
|
2405:b500::/32
|
|
2405:8100::/32
|
|
2a06:98c0::/29
|
|
2c0f:f248::/32
|