Add an IP or prefix to the allowlist

To add an IP address or prefix to the Advanced TCP Protection allowlist:

1. Log in to the Cloudflare dashboard ↗ and select your account.
2. Go to L3/4 DDoS > Advanced Protection.
3. Under General settings > Allowlist, select Edit.
4. Enter a prefix and (optionally) a description in Prefix and Description, respectively.
5. To exclude the current prefix from the allowlist instead of including it, uncheck the Enabled checkbox.
6. Select Add.

Important

Prefixes in the allowlist will be vulnerable to IP spoofing attacks. If an attacker can guess the source IP addresses you have allowlisted, their packets will be allowlisted.